[squid-users] [squid-announce] [ADVISORY] SQUID-2024:1 Denial of Service in HTTP Chunked Decoding

2024-03-04 Thread Amos Jeffries
__ Squid Proxy Cache Security Update Advisory SQUID-2024:1 __ Advisory ID: | SQUID-2024:1 Date: | Mar 4, 2024 Summary: | Denial of Serv

[squid-users] [squid-announce] [ADVISORY] SQUID-2024:2 Denial of Service in HTTP Header parser

2024-03-04 Thread Amos Jeffries
__ Squid Proxy Cache Security Update Advisory SQUID-2024:2 __ Advisory ID: | SQUID-2024:2 Date: | Feb 15, 2024 Summary: | Denial of Ser

[squid-users] [squid-announce] [ADVISORY] SQUID-2023:11 Denial of Service in Cache Manager

2024-03-04 Thread Amos Jeffries
__ Squid Proxy Cache Security Update Advisory SQUID-2023:11 __ Advisory ID: | SQUID-2023:11 Date: | Jan 24, 2024 Summary: | Denial of Ser

[squid-users] [squid-announce] [ADVISORY] SQUID-2023:10 Denial of Service in HTTP Request parsing

2024-03-04 Thread Amos Jeffries
__ Squid Proxy Cache Security Update Advisory SQUID-2023:10 __ Advisory ID: | SQUID-2023:10 Date: | Dec 10, 2023 Summary: | Denial of Ser

Re: [squid-users] Missing IPv6 sockets in Squid 6.7 in some servers

2024-03-04 Thread Amos Jeffries
On 5/03/24 08:03, Dragos Pacher wrote: Hello, I am a Squid beginner and we would like to use Squid inside our organization only as a HTTPS traffic inspection/logging tool for some 3rd party apps that we bought, something close to what a "MITM proxy" is called but we will not do that, instead

Re: [squid-users] Missing IPv6 sockets in Squid 6.7 in some servers

2024-03-04 Thread Dragos Pacher
Thank you Alex, Indeed something is listening on this port, but it looks to be Squid: root@A2-3:/# nc -6 -l 3128 nc: Address already in use root@A2-3:/# lsof -i:3128 COMMAND PID USER FD TYPEDEVICE SIZE/OFF NODE NAME squid 3480423 proxy 25u IPv4 283726201 0t0 TCP A2-3:3128

Re: [squid-users] Missing IPv6 sockets in Squid 6.7 in some servers

2024-03-04 Thread Alex Rousskov
On 2024-03-04 14:03, Dragos Pacher wrote: POC running well on 3 servers but on the 4th I get no IPv6 sockets: ubuntu@A2-3:/$ sudo netstat -patun | grep squid | grep tcp tcp        0      0 10.10.0.16:3128         0.0.0.0:* LISTEN      2891391/(squid-1) Are there any other proces

[squid-users] Missing IPv6 sockets in Squid 6.7 in some servers

2024-03-04 Thread Dragos Pacher
Hello, I am a Squid beginner and we would like to use Squid inside our organization only as a HTTPS traffic inspection/logging tool for some 3rd party apps that we bought, something close to what a "MITM proxy" is called but we will not do that, instead we use a self signed certificate and the

Re: [squid-users] Squid delay_access with external acl

2024-03-04 Thread Alex Rousskov
On 2024-03-04 06:31, Szilárd Horváth wrote: Thank you so much your answer but this solution isn't work. Please note that I did not (try to) offer a solution. I only tried to correct a specific problem in a specific configuration statement. I hope that Francesco will continue to guide you to

Re: [squid-users] Squid delay_access with external acl

2024-03-04 Thread Szilárd Horváth
Hi Alex, Thank you so much your answer but this solution isn't work. Please check my config maybe i made a mistake. Or maybe have you any other solution? I can use proxy users from QUOTA_EXCEEDED_USERS.acl which contain e-mail address or get from ldap with external_acl_type overkvota children-