So whats the deal with Squid being identified as an Open Proxy? Is the standard config really vulnerable?
sounds strange to me, but never tried it thourougly
Why was it running when the GUI indicated that it was disabled?
This happens a lot with Qube3's. The default ot-of-the-box seems to be that squid is running, while the interface will display it as disabled. You action of starting and stopping it again through the gui should solve the problem. To be absolutly sure, i moved the binary itself to another directory on our cube's, since we dont want squid anyway.
The Qube3 in question is fully patched? Did a patch enable Squid even though the GUI indicated that it shouldn't be running?