<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-signature">ouch#4 here... <br>
<br>
I purged my squid and installed a new one with apt-get (don't know
if I have the skills to compile one).<br>
Now I received a message (one is better than nothing) on mozilla:<br>
<br>
<tt><i>Error 404--Not Found</i></tt><tt><i><br>
</i></tt><tt><i>From RFC 2068 Hypertext Transfer Protocol --
HTTP/1.1:</i></tt><tt><i><br>
</i></tt><tt><i>10.4.5 404 Not Found</i></tt><tt><i><br>
</i></tt><tt><i><br>
</i></tt><tt><i>The server has not found anything matching the
Request-URI. No indication is given of whether the condition
is temporary or permanent.</i></tt><br>
<br>
<br>
<br>
<br>
<br>
</div>
<div class="moz-cite-prefix">On 06/05/2015 10:49, Amos Jeffries
wrote:<br>
</div>
<blockquote cite="mid:554A1BF7.6080100@treenet.co.nz" type="cite">
<pre wrap="">On 7/05/2015 12:57 a.m., Rodrigo Lopes Mauricio wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Hi Antony. Thanks for your answer.
The public IP is the same with or without squid.
This is the site in question:
<a class="moz-txt-link-freetext" href="http://minhaclaro.claro.com.br">http://minhaclaro.claro.com.br</a>
</pre>
</blockquote>
<pre wrap="">
Just for fun I went and looked at how this was working.
The default public facing page presented by that IIS/6.0 server is a
page saying "Under Constrution" and reports its reply content as being
located at <a class="moz-txt-link-freetext" href="http://172.30.0.13/iisstart.htm">http://172.30.0.13/iisstart.htm</a>
172.30.0.13 is a private RFC1918 space IP address, not for use on the
global Internet.
Ouch.
That goes on and does an HTML level redirect (30x redirect works
better). Presenting the client with a web form (huh?) in the clear (ouch
#2) containing a fixed set of logins fields (ouch #3) to send over HTTPS
to a third-party domain using a very weak cipher protected by MD5 hash
(alarm bells). Resulting in yet anothet HTML level redirect.
If you access that server without the right details from the form it
diverts you to <a class="moz-txt-link-freetext" href="http://go.microsoft.com/">http://go.microsoft.com/</a> and sends your details there
along with search query terms for "HTTP 404" (grr).
I would look deeper, but this is already making me want to strangle someone.
Amos
_______________________________________________
squid-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a>
<a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a>
</pre>
</blockquote>
<br>
</body>
</html>