Building a Secure Squid Web Proxy, Part III

摘要

Setting ACLs, running Squid with nonroot privileges most or all of the time and running Squid in a chroot jail constitute the bulk of Squid's built-in security features. But, these are not the only things you can do to use Squid to enhance your network and end-user systems' security.rnNext time, I'll show you how to use add-on tools such as SquidGuard to increase Squid's intelligence in how it evaluates clients' requests and servers' replies. I'll also address (if not next time then in a subsequentrncolumn) some of the finer points of proxying TLS/SSL-encrypted sessions. Until then, be safe!