Re: [squid-users] Squid and HTTP Host value

On tor, 2008-07-03 at 22:29 +0100, Julian Gilbert wrote:
> I am trying to configure squid 2.5 and looking for some assistance. When I
> make client request to squid in the form:
>
> GET http://66.102.9.147/
> HOST www.google.co.uk

That's a request for http://66.102.9.147/. The Host header in there MUST
be ignored.

> the squid proxy makes the following request to the web server:
>
> GET /
> HOST 66.102.9.147

Which is correct.

> How do I configure squid not to overwire the host value? The request from
> squid should be sent as:
>
> GET /
> HOST www.google.co.uk

Make sure to request that from start.

Not updating the Host header to match the request is a major security
hazard.

Regards
Henrik