tor 2006-11-02 klockan 15:54 +0100 skrev nick humphrey:

> cache_peer 192.168.0.150 parent 8080 3130 ssl sslflags=DONT_VERIFY_PEER 
> no-query

DONT_VERIFY_PEER opens you to man-in-the-middle attacks. Better to give
it the CA information needed to validate the peer..

Also you need the originserver option to tell Squid it's an origin
server.

Cosmetic note: I find it easier to read using ICP port 0 when using the
no-query option.

Regards
Henrik

Attachment: signature.asc
Description: Detta är en digitalt signerad meddelandedel

Reply via email to