Re: [squid-users] Someone's using my cache?

> You definitely have a fully open proxy configured for anyone who can send
> packets to it. Also the firewall itself intercepts and sends stuff into
> the proxy.

Yes, I've not had much time to learn it yet, I just needed to get it running for a quick satellite demo so simply opened a port 80 hole in the firewall for traffic and created a basic config.
 
>> http_access     allow accel_hosts
>> http_access     allow manager localhost
>> http_access     deny manager
>> http_access     allow all
>> 
> The line above permits anyone who can send a packet to your proxy to use
> it as a relay for any purpose they like.
> The restrictions above it are not denying anything except cache_mgr://
> protocol. So there is no protection inside Squid.
> The default config is safe if you set localnet to you internal IPs only:

I actually need to allow public connections since we don't know which machines are actually connecting for the testing.

>> http_access     allow all

I kind of figured that this might be a hole but I was not able to find out what I should build as a config in time. I needed and need to have this working as part of a demo, then later will have time to get back to it and learn more about it.
 
> What version of squid are you on?
> Whats the purpose of these? and what traffic are they catching?
> http_port 80 transparent
> http_port 443 transparent

It's version 2.6.

With the tiny amount of knowledge I gathered up, I put a config together which would allow public connections to a server on the network. The trial was showing off a website which was designed for satellite users so we used the proxy to speed things up a bit.

The port 80/443 variables, I thought, were meant to allow traffic to come in on those ports but transparently since the users are any public user.

Mike
Received on Wed Nov 12 2008 - 01:57:25 MST