[squid-users] Host header forgery detected after upgrade from 3.5.8 to 3.5.9

[Dan Charlesworth]

I’m getting these very frequently for api.github.com and github.com

I’m using the same DNS servers as my intercepting squid 3.5.10 proxy and they only return the one IP when I do an nslookup as well …

Any updates from your end, Roel?

> On 8 Oct 2015, at 8:29 PM, Eliezer Croitoru <eliezer at ngtech.co.il> wrote:
> 
> Since they are using the same dns server there is no need to run some trials.
> The only test you should in any case test is to see how long is the IP list from the DNS request for the domain name.
> 
> Eliezer
> 
> On 08/10/2015 12:12, Roel van Meer wrote:
>> Eliezer Croitoru writes:
>> 
>>> Are the users and proxy using different dns server?
>> 
>> No, they are using the same server.
>> 
>>> Can you run dig from the proxy on this domain and dump the content to
>>> verify that the ip is indeed there?
>> 
>> I'm currently running with 3.5.8 again, so I'll have to find a quiet
>> hour where I can upgrade and check this. I'll get back to you. Thanks!
>> 
>> Roel
> 
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users