From f426e1b3bd6c90518d8924e84ff29ec06ab5c3c8 Mon Sep 17 00:00:00 2001 From: Takuya Ono Date: Tue, 11 Jun 2024 13:32:05 +0900 Subject: [PATCH] =?UTF-8?q?=F0=9F=94=A7=20Fix(docker/volumes/ssrf=5Fproxy/?= =?UTF-8?q?squid.conf):=20=20The=20squid=20process=20on=20ssrf=5Fproxy=20d?= =?UTF-8?q?ocker=20service=20crashes=20at=20startup=20(#5050)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- docker/volumes/ssrf_proxy/squid.conf | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/docker/volumes/ssrf_proxy/squid.conf b/docker/volumes/ssrf_proxy/squid.conf index be13d0e898..06bedb8aaf 100644 --- a/docker/volumes/ssrf_proxy/squid.conf +++ b/docker/volumes/ssrf_proxy/squid.conf @@ -23,7 +23,7 @@ http_access deny CONNECT !SSL_ports http_access allow localhost manager http_access deny manager http_access allow localhost -http_access allow localnet +include /etc/squid/conf.d/*.conf http_access deny all ################################## Proxy Server ################################ @@ -37,7 +37,6 @@ refresh_pattern \/Release(|\.gpg)$ 0 0% 0 refresh-ims refresh_pattern \/InRelease$ 0 0% 0 refresh-ims refresh_pattern \/(Translation-.*)(|\.bz2|\.gz|\.xz)$ 0 0% 0 refresh-ims refresh_pattern . 0 20% 4320 -logfile_rotate 0 # upstream proxy, set to your own upstream proxy IP to avoid SSRF attacks # cache_peer 172.1.1.1 parent 3128 0 no-query no-digest no-netdb-exchange default @@ -47,4 +46,4 @@ logfile_rotate 0 http_port 8194 accel vhost cache_peer sandbox parent 8194 0 no-query originserver acl src_all src all -http_access allow src_all \ No newline at end of file +http_access allow src_all