Re: [squid-users] security risk ?

From: Ralf Hildebrandt <Ralf.Hildebrandt_at_charite.de>
Date: Fri, 12 Jun 2009 17:26:15 +0200

* RoLaNd RoLaNd <r_o_l_a_n_d_at_hotmail.com>:

> i've visited the following site : http://whatismyipaddress.com/
> and found out that i may have misconfigured a security feature in squid as it gives out it's info without any restrictions..
>
> for example visiting the site above would result to :
>
>
> Proxy Server Detected!
> (proxy test results)Proxy Server IP address: X.X.X.X Proxy Server Details: 1.1 AynaProxy:3128 (squid/2.6.STABLE21)Proxy Reports IP as: 192.168.75.139
>
>
> what have i missed ? how can i stop this ?!

Look at the disclose_x_forwarded_for option 

-- 
Ralf Hildebrandt
  Geschäftsbereich IT | Abteilung Netzwerk
  Charité - Universitätsmedizin Berlin
  Campus Benjamin Franklin
  Hindenburgdamm 30 | D-12200 Berlin
  Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
  Ralf.Hildebrandt@charite.de | http://www.charite.de
Received on Fri Jun 12 2009 - 15:26:25 MDT

This archive was generated by hypermail 2.2.0 : Sat Jun 13 2009 - 12:00:02 MDT