Re: Squid infinite looping

Mark Lowes wrote:
> On Thu, 27 Nov 1997 18:20:15 +0300 (MSK), you wrote:
>
> >If one connects to Squid and asks Squid to get itself, e.g
> >"GET http://localhost:80 HTTP/1.0", Squid goes looping
> >opening numerous connections to itself.
>
> Nope, doesn't do it here (NOVM .17 & .18)
[skip]

Hmm, it's interesting... It seems that NOV converts such urls
to absolute paths...
 
> which version are you running?

1.1.18
 
> [...]
> >Today some unnamed hacker tried to get <http://localhost>
> >and made my Squid loop again. So I added a news access list
> >"url_regex ^http://localhost" and made the Squid deny such URLs.
>
> Hopefully it'll only be our own users who can do this sort of trick
> anyway (access limited to our own /19).

Our Squid does transparent caching of the http traffic going
to our satellite link, which is used by many independet networks,
so we cannot use address-based access lists.

SY, Yar
Received on Thu Nov 27 1997 - 08:03:31 MST