Transparentny proxy

[Peter V. (LTS)]

Diky moc!
Velmi uzitocny link, aj dalsie veci ;)

Otazky:
#       HTTP/1.1 requests include a Host: header which is basically the
#       hostname from the URL.  Squid can be an accelerator for
#       different HTTP servers by looking at this header.  However,
#       Squid does NOT check the value of the Host header, so it opens
#       a big security hole.  We recommend that this option remain
#       disabled unless you are sure of what you are doing.
#
#       However, you will need to enable this option if you run Squid
#       as a transparent proxy.  Otherwise, virtual servers which
#       require the Host: header will not be properly cached.

httpd_accel_uses_host_header on - preco nemoze byt off?
!!! Squid does NOT check the value of the Host header, so it opens a big
security hole !!!
ako sa vyhnut problemom/osetrit hole?
(celkom nerozumiem varovaniu)
dik, transp. proxy uz funguje :))


----- Original Message -----
From: "Dan Bar" <Daniel.Bar na seznam.cz>
To: <linux na linux.cz>
Sent: Thursday, November 13, 2003 8:26 PM
Subject: Re: Transparentny proxy


>
> http://www.pslib.cz/~kerslage/manuals/linux/pripojeni/#trans