RE: [squid-users] Deny Direct Proxy request !

Hi ,

I have read the squid.conf.default and it's said this about
httpd_accel_with_proxy :
 httpd_accel_with_proxy off

  TAG: httpd_accel_uses_host_header on|off
       HTTP/1.1 requests include a Host: header which is basically the
       hostname from the URL. Squid can be an accelerator for
       different HTTP servers by looking at this header. However,
       Squid does NOT check the value of the Host header, so it opens
       a big security hole. We recommend that this option remain
       disabled unless you are sure of what you are doing.

       However, you will need to enable this option if you run Squid
       as a transparent proxy. Otherwise, virtual servers which
       require the Host: header will not be properly cached.

so I have change it to off then check it again and it has worked too also !
but after a while my squid has died !
so what is the problem ?!

--
Regards
    ============================================================
   /  Seyyed Hamid Reza    /        WINDOWS FOR NOW  !!            /
  /  Hashemi Golpayegani  /  Linux for future , FreeBSD for ever  /
 /    Morva System Co.   / ------------------------------------- /
/  Network Administrator/ hamid@morva.net   ,   ICQ# : 42209876 /
===========================================================
-----Original Message-----
From: Joe Cooper [mailto:joe@swelltech.com]
Sent: Friday, March 16, 2001 12:25 AM
To: Hamid Hashemi Golpayegani
Cc: Squid Users
Subject: Re: [squid-users] Deny Direct Proxy request !
Turn off httpd_accel_with_proxy.
Hamid Hashemi Golpayegani wrote:
> Hi ,
>
> I have installed the squid-2.4Pre1 with Linux and make a transparent Proxy
> with IPChains in Linux . So no one want to setup the proxy in his browser
.
> So How can I prevent to squid does not answer the direct proxy request ? I
> mean everybody forced to remove their proxy setting in squid . they can't
> brows any pages if they have proxy setting in their browsers like
> squid.mydoamin.com port 3128 ?
                                   --
                      Joe Cooper <joe@swelltech.com>
                  Affordable Web Caching Proxy Appliances
                         http://www.swelltech.com