On 09/06/11 23:24, Tom Tux wrote:
Hi

I need to verify, if I get a mail when squid dies (I put a correct
mailaddress in cache_mgr-directive). Is there a way/hack to force
squid to die? I tried several things like revoking permissions on the
the cache-dir, moving cache.log away... ->  but squid is still alive.


The email dress is used on the error pages, to display an *optional* "send an email to the admin" URL.

Doing the abort emails automatically requires squid to hit an assertion failure, which triggers abort(). It slows down the recovery period. So external tools are preferred which watch the log stream for "assertion failure:" (I think that is the text in all squids).

If you can find a way to reliably hit one of the assertions remotely, that is a DoS vulnerability and *we want to know* ASAP.

Amos
--
Please be using
  Current Stable Squid 2.7.STABLE9 or 3.1.12
  Beta testers wanted for 3.2.0.8 and 3.1.12.2

Reply via email to