Привет %username%, Сегодня я хотел бы рассказать про достаточно тривиальную задачу сбора логов с децентрализованных Squid proxy серверов и подводные камни с которыми мы столкнулись. Что имеем: Squid-hq Squid-br1 Squid-br2 Squid-br3 Squid-br4 Squid-db Читать дальше →
Настройка файла конфигурации SquidПроизведем базовую настройку, открываем /etc/squid/squid.conf# Аутентификация Kerberosauth_param negotiate program /usr/lib/squid/negotiate_kerberos_auth -k /etc/squid/squid.keytab -s proxy_k@YOURDOMAIN.RUauth_param negotiate children 160 startup=0 idle=1auth_param negotiate keep_alive off ... Читать далее
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a NULL pointer dereference bug Squid is vulnerable to a Denial of Service attack against Squid's Gopher gateway. The gopher protocol is always available and enabled in Squid prior to Squid 6.0.1. Responses triggering this bug are possible to be received from any gopher server, even those without malicious intent. Gopher support has been removed in Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade…
https://security-tracker.debian.org/tracker/DSA-5751-1