pfSense bugtracker

10/18/2023

02:53 PM pfSense Packages Bug #14390: Squid: SECURITY ALERT: Host header forgery detected

Can anyone advise on the feasibility of building a custom patched version of Squid (at least for testing purposes to ... Simon Byrnand

09/26/2023

01:32 PM pfSense Packages Bug #14390: Squid: SECURITY ALERT: Host header forgery detected

Denis Roy wrote in #note-9:
> I have a transparent deployment with pfSense 2.7.0, and a mitigation has been to rely o... Simon Byrnand

09/20/2023

06:28 PM pfSense Packages Bug #14390: Squid: SECURITY ALERT: Host header forgery detected

Hi Mike, (and others)
Thanks for commenting and having a look at this - I agree, with "host_verify_strict off", whic... Simon Byrnand

05/17/2023

10:23 AM pfSense Packages Bug #14390: Squid: SECURITY ALERT: Host header forgery detected

I've written a small Python script to help reliably reproduce and demonstrate this issue.
To simulate an application... Simon Byrnand

05/16/2023

09:27 AM pfSense Packages Bug #14390: Squid: SECURITY ALERT: Host header forgery detected

I can't seem to edit my initial post but wanted to clarify the Squid debug option should be *debug_options ALL,1 rota... Simon Byrnand

09:19 AM pfSense Packages Bug #14390 (New): Squid: SECURITY ALERT: Host header forgery detected

In Squid version 3.2 in 2012 a "fix" for a potential security vulnerability involving host header forgery was added, ... Simon Byrnand

12/05/2022

04:02 PM pfSense Bug #13707: Unbound not binding to LAN on startup when explicitly set

Thanks Jim, but if I'm just going to be shunted back to the forum with "it must be something wrong with your hardware... Simon Byrnand

02:41 PM pfSense Bug #13707: Unbound not binding to LAN on startup when explicitly set

Jim Pingle wrote in #note-10:
> Simon Byrnand wrote in #note-9:
> > Jim Pingle wrote in #note-8:
> > There seems to b... Simon Byrnand

10:13 AM pfSense Bug #13707: Unbound not binding to LAN on startup when explicitly set

Jim Pingle wrote in #note-8:
> It gets started/restarted by rc.bootup, rc.newwanip, and/or rc.newwanipv6. There ar... Simon Byrnand

03:53 AM pfSense Bug #13707: Unbound not binding to LAN on startup when explicitly set

Jordan Greene wrote in #note-6:
> Simon Byrnand wrote in #note-5:
>
> > Thinking it might be related to the Unifi co... Simon Byrnand