From owner-freebsd-security Thu Feb 21 7: 4:49 2002 Delivered-To: freebsd-security@freebsd.org Received: from mail.univr.it (mail.univr.it [157.27.6.110]) by hub.freebsd.org (Postfix) with SMTP id D9E2537B404 for ; Thu, 21 Feb 2002 07:04:46 -0800 (PST) Received: (qmail 5100 invoked from network); 21 Feb 2002 15:01:11 -0000 Received: from morpheus.univr.it (HELO morpheus) (157.27.6.83) by mail.univr.it with SMTP; 21 Feb 2002 15:01:11 -0000 Message-ID: <003f01c1bae8$8abb1520$53061b9d@univr.it> From: "Alberto Manzoni" To: Subject: FreeBSD Ports Security Advisory FreeBSD-SA-02:12.squid Date: Thu, 21 Feb 2002 16:00:46 +0100 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4522.1200 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org >4) No workaround exists for the HTCP issue except to set up a firewall >rule to block incoming packets to the Squid HTCP port (normally, UDP >port 4827) from untrusted hosts. No way setting htcp_port 0 ?? To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message