[squid-users] Host header forgery detected after upgrade from 3.5.8 to 3.5.9

Eliezer Croitoru eliezer at ngtech.co.il
Thu Oct 8 09:29:06 UTC 2015


Since they are using the same dns server there is no need to run some 
trials.
The only test you should in any case test is to see how long is the IP 
list from the DNS request for the domain name.

Eliezer

On 08/10/2015 12:12, Roel van Meer wrote:
> Eliezer Croitoru writes:
>
>> Are the users and proxy using different dns server?
>
> No, they are using the same server.
>
>> Can you run dig from the proxy on this domain and dump the content to
>> verify that the ip is indeed there?
>
> I'm currently running with 3.5.8 again, so I'll have to find a quiet
> hour where I can upgrade and check this. I'll get back to you. Thanks!
>
> Roel



More information about the squid-users mailing list