Re: [squid-users] Re: DNS & Squid tree with parent - child

On 25/04/2012 5:44 p.m., anita wrote:
> Hi Amos,
>
> Thanks for the reply. I could now understand the meaning of transparent
> proxy wrt DNS lookups !

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0801

In order to prevent malicious clients using the proxy to bypass browser
security, firewall rules, or spread infections across the LAN. Squid-3.2
performs DNS lookups on the Host: header domain to validate whether it
matches the intercepted TCP connection details accurately and disable
any dangerous actions like caching.

Amos
Received on Wed Apr 25 2012 - 06:12:51 MDT