<div dir="auto"><div>Hey Jonathan,</div><div dir="auto"><br></div><div dir="auto">I cannot speak for the whole squid community, however if someone in the pfsense community doesn't want to maintain and or use squid it's his own choice.</div><div dir="auto">If there is an issue it can be researched and there so much information about this specific "issue" that it's weird nobody bothered to respond the issue.</div><div dir="auto"><br></div><div dir="auto">The reason for the log output is widely known and there are couple ways to resolve this.</div><div dir="auto">I wrote a patch to override this behaviour in the past but I am no longer supporting this.</div><div dir="auto">The main reason for me not supporting overriding this fix is since there are many bad actors which are using squid for their own gain while sacrificing some internet connectivity security aspects.</div><div dir="auto">It is recommended to use a shared dns service for both the clients and the proxy server to avoid such issues.</div><div dir="auto"><br></div><div dir="auto">My general recommendation is to use squid on a linux based os if possible.</div><div dir="auto"><br></div><div dir="auto">There are other firewall projects which might be a better choice for your use case if you really need the proxy.</div><div dir="auto">In my setup I am using Mikrotik as a router and firewall for a 1gbps line and a tiny x86 server for all other services.</div><div dir="auto">It's more efficient and practical compared to netgate in my scenario.</div><div dir="auto"><br></div><div dir="auto">Yours,</div><div dir="auto">Eliezer </div><div dir="auto"><br><div class="gmail_quote" dir="auto"><div dir="ltr" class="gmail_attr">בתאריך יום ה׳, 31 באוק׳ 2024, 21:32, מאת Jonathan Lee <<a href="mailto:jonathanlee571@gmail.com">jonathanlee571@gmail.com</a>>:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">
<div style="direction:ltr;text-align:left;text-indent:0px;margin:0px;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
Hello, thank you for the update Francesso, there is also some chatter about bugs within the Netgate community. Is this also related to the fixes in V7 (please see Redmine attached)?</div>
<div style="direction:ltr;text-align:left;text-indent:0px;margin:0px;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="direction:ltr;text-align:left;text-indent:0px;margin:0px;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
I admit, I have a bias and assumption that that Big-Tech does not like Squid functional, and that most of what is listed below was done within a political aspect to generate a confusion within the firewall community. So much so that the package was considered
an issue and Netgate started to recommend Squid's removal. I have stood by this package and continue to, as it works beautifully.</div>
<div style="direction:ltr;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="direction:ltr;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
This Redmine should have been more concise and simplified within its notes, it seems to just generate confusion. I do not have issues like this and that is where I start to question what this is related to. Can Someone please respond to this Redmine for verification
that has a higher-level knowledge about Squid? I hate to see this removed for some simple reason like a PHP issue that causes configuration issues. </div>
<div style="direction:ltr;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="direction:ltr;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<a href="https://redmine.pfsense.org/issues/14390" id="m_846167013956912421OWA565dae7f-ebba-0e5b-351e-11c222f75ac8" target="_blank" rel="noreferrer">Bug #14390: Squid: SECURITY ALERT: Host header forgery detected - pfSense Packages - pfSense bugtracker</a></div>
<div id="m_846167013956912421LPBorder_GTaHR0cHM6Ly9yZWRtaW5lLnBmc2Vuc2Uub3JnL2lzc3Vlcy8xNDM5MA.." style="width:100%;margin-top:16px;margin-bottom:16px;max-width:800px;min-width:424px;color:inherit">
<table id="m_846167013956912421LPContainer265505" style="border-width:1px;border-style:solid;border-color:rgb(200,200,200);border-radius:2px;width:100%;color:inherit;background-color:inherit">
<tbody>
<tr>
<td style="width:100%">
<div id="m_846167013956912421LPTitle265505" style="font-size:21px;font-weight:300;margin-right:8px;font-family:wf_segoe-ui_light,"Segoe UI Light","Segoe WP Light","Segoe UI","Segoe WP",Tahoma,Arial,sans-serif;margin-bottom:12px">
<a href="https://redmine.pfsense.org/issues/14390" id="m_846167013956912421LPUrlAnchor265505" style="text-decoration:none" target="_blank" rel="noreferrer">Bug #14390: Squid: SECURITY ALERT: Host header forgery detected - pfSense Packages - pfSense bugtracker</a></div>
<div id="m_846167013956912421LPDescription265505" style="font-size:14px;max-height:100px;font-family:wf_segoe-ui_normal,"Segoe UI","Segoe WP",Tahoma,Arial,sans-serif;margin-bottom:12px;margin-right:8px;overflow:hidden;color:rgb(102,102,102)">
Redmine</div>
<div id="m_846167013956912421LPMetadata265505" style="font-size:14px;font-family:wf_segoe-ui_normal,"Segoe UI","Segoe WP",Tahoma,Arial,sans-serif;color:rgb(166,166,166)">
<a href="http://redmine.pfsense.org" target="_blank" rel="noreferrer">redmine.pfsense.org</a></div>
</td>
</tr>
</tbody>
</table>
</div>
<div style="direction:ltr;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div id="m_846167013956912421x_divRplyFwdMsg" dir="ltr" style="color:inherit"></div>
<div id="m_846167013956912421x_x_appendonsend" style="color:inherit"></div>
<div id="m_846167013956912421x_x_divRplyFwdMsg" dir="ltr" style="color:inherit"></div>
</div>
_______________________________________________<br>
squid-users mailing list<br>
<a href="mailto:squid-users@lists.squid-cache.org" target="_blank" rel="noreferrer">squid-users@lists.squid-cache.org</a><br>
<a href="https://lists.squid-cache.org/listinfo/squid-users" rel="noreferrer noreferrer" target="_blank">https://lists.squid-cache.org/listinfo/squid-users</a><br>
</blockquote></div></div></div>