1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
|
README for the squid-cgi cachemanager package.
0. INTRODUCTION
This package was seperated from the main squid proxy cache package so
that you can install it on another server than the one squid is
running on, usually your webserver host.
1. DOCUMENTATION
There's a chapter on the cache manager in the squid FAQ. The relevant
section of the FAQ is installed as /usr/doc/squid-cgi/cachemgrfaq.html.
2. POINTING IT TO YOUR CACHE HOST
The FAQ tells you that if you want to use the cachemgr.cgi program to
connect by default to another host instead of localhost and/or another port
that you should recompile cachemgr.cgi. This is not strictly true; you
can save the output of the initial screen to cachemgr.html, change
the defaults, save it somewhere into your HTML documents tree and call
up that screen instead of cachemgr.cgi.
A sample cachemgr.html is provided in /usr/doc/squid-cgi/examples/
3. WARNING
Because it is easy to point the cache manager to any host and port,
the cache manager can be used to connect to any service on any host
inside or outside your network. If cachemgr.cgi can be reached from
any remote host, it can be used to connect to any other host/port and
the connection then comes from your webserver. Attackers/crackers
can abuse this to do eg portscans that then originate from your
machine.
If you don't use the cache manager, it's probably wise to uninstall
the squid-cgi package. Otherwise a few access restrictions in
/etc/apache/access.conf or in a .htaccess file in /usr/lib/cgi-bin/
should be added to only alow connections to the cachemgr.cgi program
from trusted hosts.
cachemgr.README 1.3 30-Oct-1999 miquels@cistron.nl
|
