<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Candara;
panose-1:2 14 5 2 3 3 3 2 2 4;}
@font-face
{font-family:"Segoe UI";
panose-1:2 11 5 2 4 2 4 2 2 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink="#954F72"><div class=WordSection1><p class=MsoNormal><span style='color:#1F497D'>Hey,<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>What happen with this issue?<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>I am waiting for any input about this issue to understand with what I can try to help.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Eliezer<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><p class=MsoNormal><span style='color:#1F497D'>----<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Eliezer Croitoru<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Tech Support<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Mobile: +972-5-28704261<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Email: <a href="mailto:ngtech1ltd@gmail.com">ngtech1ltd@gmail.com</a><o:p></o:p></span></p></div><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> DIXIT Ankit [mailto:Ankit.Dixit@eurostar.com] <br><b>Sent:</b> Tuesday, June 30, 2020 12:35 PM<br><b>To:</b> Eliezer Croitoru; Squid Users<br><b>Cc:</b> SETHI Konica<br><b>Subject:</b> RE: [squid-users] Squid memory consumption problem<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>For your information, we have added below configurations but again same issue.<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>tls_outgoing_options options=NO_SSLv3,SINGLE_DH_USE,SINGLE_ECDH_USE<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>tls_outgoing_options cipher=HIGH:MEDIUM:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><div><p class=MsoNormal style='text-autospace:none'><b><span style='color:#1F497D'>Regards,</span></b><o:p></o:p></p><p class=MsoNormal style='text-autospace:none'><b><span style='color:#1F497D'>Ankit Dixit|IS Cloud Team</span></b><o:p></o:p></p><p class=MsoNormal style='text-autospace:none'><b><span style='font-family:"Candara","sans-serif";color:#7F7F7F'>Eurostar International Ltd</span></b><o:p></o:p></p><p class=MsoNormal><b><span style='font-family:"Candara","sans-serif";color:#7F7F7F'>Times House | Bravingtons Walk | </span><span style='color:#7F7F7F'>London N1 9AW</span></b><o:p></o:p></p><p class=MsoNormal style='text-autospace:none'><b><span lang=FR style='color:#7F7F7F'>Office: +44 (0)207 84 35550 (Extension– 35530)</span></b><o:p></o:p></p></div><p class=MsoNormal> <o:p></o:p></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> DIXIT Ankit <br><b>Sent:</b> Tuesday, June 30, 2020 10:25 AM<br><b>To:</b> Eliezer Croitoru <ngtech1ltd@gmail.com>; Squid Users <squid-users@lists.squid-cache.org><br><b>Cc:</b> SETHI Konica <Konica.Sethi@eurostar.com><br><b>Subject:</b> RE: [squid-users] Squid memory consumption problem<o:p></o:p></p></div></div><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Eliezer,<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Clients are facing some SSL related issues after upgrade. I could see below error. Please suggest, its little urgent.<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal><span style='font-size:10.5pt;font-family:"Segoe UI","sans-serif"'>quid[6706]: Error negotiating SSL connection on FD 167: error:00000001:lib(0):func(0):reason(1) (1/0)<br>Jun 30 09:17:38 squid[6706]: Error parsing SSL Server Hello Message on FD 77<br>Jun 30 09:17:38 squid[6706]: Error negotiating SSL connection on FD 75: error:00000001:lib(0):func(0):reason(1) (1/0)</span><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><div><p class=MsoNormal style='text-autospace:none'><b><span style='color:#1F497D'>Regards,</span></b><o:p></o:p></p><p class=MsoNormal style='text-autospace:none'><b><span style='color:#1F497D'>Ankit Dixit|IS Cloud Team</span></b><o:p></o:p></p><p class=MsoNormal style='text-autospace:none'><b><span style='font-family:"Candara","sans-serif";color:#7F7F7F'>Eurostar International Ltd</span></b><o:p></o:p></p><p class=MsoNormal><b><span style='font-family:"Candara","sans-serif";color:#7F7F7F'>Times House | Bravingtons Walk | </span><span style='color:#7F7F7F'>London N1 9AW</span></b><o:p></o:p></p><p class=MsoNormal style='text-autospace:none'><b><span lang=FR style='color:#7F7F7F'>Office: +44 (0)207 84 35550 (Extension– 35530)</span></b><o:p></o:p></p></div><p class=MsoNormal> <o:p></o:p></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> Eliezer Croitoru <<a href="mailto:ngtech1ltd@gmail.com">ngtech1ltd@gmail.com</a>> <br><b>Sent:</b> Tuesday, June 30, 2020 9:10 AM<br><b>To:</b> Squid Users <<a href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a>>; DIXIT Ankit <<a href="mailto:Ankit.Dixit@eurostar.com">Ankit.Dixit@eurostar.com</a>><br><b>Subject:</b> RE: [squid-users] Squid memory consumption problem<o:p></o:p></p></div></div><p class=MsoNormal> <o:p></o:p></p><table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0><tr><td style='padding:0in 0in 0in 0in'><p class=MsoNormal><img border=0 width=600 height=25 id="Picture_x0020_1" src="cid:image001.jpg@01D65306.94E96040"><o:p></o:p></p></td></tr></table><p class=MsoNormal style='margin-bottom:12.0pt'> <o:p></o:p></p><p class=MsoNormal>The first thing to do is look at:<o:p></o:p></p><p class=MsoNormal><a href="https://wiki.squid-cache.org/KnowledgeBase/HostHeaderForgery">https://wiki.squid-cache.org/KnowledgeBase/HostHeaderForgery</a><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>It should clear couple doubts for you.<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Eliezer<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>----<o:p></o:p></p><p class=MsoNormal>Eliezer Croitoru<o:p></o:p></p><p class=MsoNormal>Tech Support<o:p></o:p></p><p class=MsoNormal>Mobile: +972-5-28704261<o:p></o:p></p><p class=MsoNormal>Email: <a href="mailto:ngtech1ltd@gmail.com">ngtech1ltd@gmail.com</a><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From: </b><a href="mailto:Ankit.Dixit@eurostar.com">DIXIT Ankit</a><br><b>Sent: </b>Tuesday, June 30, 2020 10:46 AM<br><b>To: </b><a href="mailto:ngtech1ltd@gmail.com">Eliezer Croitoru</a>; <a href="mailto:rousskov@measurement-factory.com">Alex Rousskov</a>; <a href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br><b>Subject: </b>RE: [squid-users] Squid memory consumption problem<o:p></o:p></p></div><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Elizer,<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>We installed Squid 4.12 on production server, amazon Linux 2, successfully but I could see below messages in the logs for SECURITY ALERT: Host header forgery detected. These are getting generated very frequently.<o:p></o:p></p><p class=MsoNormal>Can we ignore this Or is it advised to suppress these alerts?<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal><span style='background:yellow;mso-highlight:yellow'>kid2| SECURITY ALERT: on URL: <a href="http://5-25-3-app.agent.datadoghq.com:443">5-25-3-app.agent.datadoghq.com:443</a></span><o:p></o:p></p><p class=MsoNormal><span style='background:yellow;mso-highlight:yellow'>2020/06/30 07:41:29 kid1| SECURITY ALERT: Host header forgery detected on local=IP remote=IP FD 97 flags=33 (local IP does not match any domain IP)</span><o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><div><p class=MsoNormal style='text-autospace:none'><b><span style='color:#1F497D'>Regards,</span></b><o:p></o:p></p><p class=MsoNormal style='text-autospace:none'><b><span style='color:#1F497D'>Ankit Dixit|IS Cloud Team</span></b><o:p></o:p></p><p class=MsoNormal style='text-autospace:none'><b><span style='font-family:"Candara","sans-serif";color:#7F7F7F'>Eurostar International Ltd</span></b><o:p></o:p></p><p class=MsoNormal><b><span style='font-family:"Candara","sans-serif";color:#7F7F7F'>Times House | Bravingtons Walk | </span><span style='color:#7F7F7F'>London N1 9AW</span></b><o:p></o:p></p><p class=MsoNormal style='text-autospace:none'><b><span lang=FR style='color:#7F7F7F'>Office: +44 (0)207 84 35550 (Extension– 35530)</span></b><o:p></o:p></p></div><p class=MsoNormal style='margin-bottom:12.0pt'> <o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'><o:p> </o:p></span></p><div class=MsoNormal align=center style='text-align:center'><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'><hr size=2 width="100%" align=center></span></div><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>This email (including any attachments) is intended only for the addressee(s), is confidential and may be legally privileged. If you are not the intended recipient, do not use, disclose, copy, or forward this email. Please notify the sender immediately and then delete it. Eurostar International Limited and its affiliates ("EIL") do not accept any liability for action taken in reliance on this email. EIL makes no representation that this email is free of viruses and addressees should check this email for viruses. The comments or statements expressed in this email are not necessarily those of EIL. <br><br>Eurostar International Ltd <br>Times House, Bravingtons Walk, London N1 9AW Registered in England and Wales No. 2462001 <o:p></o:p></span></p><div class=MsoNormal align=center style='text-align:center'><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'><hr size=2 width="100%" align=center></span></div></div></body></html>