[squid-users] Squid Project Status with regard to "Joshua 55" vulnerabilities

2024-10-09 Thread Francesco Chemolli
The Squid Project apologizes for being late in responding to the publication of 55 vulnerabilities disclosed by Joshua Rogers of Opera Software at https://megamansec.github.io/Squid-Security-Audit/ We thank Joshua for discovering these bugs and sharing their details with us. The surprise publicati

[squid-users] Squid 6.10 SSL-Bump Woes

2024-10-09 Thread Bryan Seitz
I have the following configuration: http_port 3128 ssl-bump generate-host-certificates=on tls-cert=/etc/squid/ssl/myCA.pem ssl_bump bump all # BMCs return Cache-Control: private reply_header_access Cache-Control deny all reply_header_add Cache-Control "public, max-age=1800" follow_x_forwarded_f

[squid-users] Unable to access a device over port 4434

2024-10-09 Thread Piana, Josh
Hello Squid users, I'm running into an issue wherein, when using Squid proxy, I'm unable to get to one of our management devices from port 4434. I've already verified that this device is not blocking access from the proxy directly, and should be allowed to get to the access page. - Wh