[cobalt-users] Qube3 Open Proxy

[Malcolm McLeary <mmcleary@xxxxxxx>]

Hi Guys,

I've had Yahoo advise me that one of my Qube3s is an Open Proxy.  The
machine in question is on a LAN behind a firewall and has only specific
ports forwarded through to it.

Upon investigation I found that although it was disabled in the GUI, Squid
was running.  I toggled it on and off again then rebooted to ensure that it
wouldn't self enable again.  Yahoo have now confirmed that my Open Proxy
problem has been resolved.

So whats the deal with Squid being identified as an Open Proxy?

Is the standard config really vulnerable?

Why was it running when the GUI indicated that it was disabled?

The Qube3 in question is fully patched?  Did a patch enable Squid even
though the GUI indicated that it shouldn't be running?

Cheers,  Malcolm