BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: Squid URL Filtering Bypass Apr 21 2012 02:09PM
Gabriel Menezes Nunes (gab mnunes gmail com)
Hi,

I tested against a server that I do not have access to the config
file, but I did some tests in a new installation of Squid and the acl
that allows CONNECT only in the SSL_PORTS works well for the CONNECT
to GET translation attack, because the CONNECT method will not work
for port 80. But the m...

[ more ]  
 

Privacy Statement
Copyright 2010, SecurityFocus