Detections
Analytics

2.2.10 Ensure web proxy server services are not in use

Information

Squid is a standard proxy server used in many distributions and environments.

Unless a system is specifically set up to act as a proxy server, it is recommended that the squid package be removed to reduce the potential attack surface.

Note: Several HTTP proxy servers exist. These should be checked and removed unless required.

Solution

Run the following commands to stop squid and remove the squid package:

# service squid onestop
# pkg remove squid

-OR- If the squid package is required as a dependency:

Run the following commands to stop and disable the squid :

# service squid onestop
# service squid onedisable

Impact:

There may be packages that are dependent on the squid package. If the squid package is removed, these dependent packages will be removed as well. Before removing the squid package, review any dependent packages to determine if they are required on the system.

-IF- a dependent package is required: stop and disable the squid leaving the squid package installed.

See Also

https://workbench.cisecurity.org/benchmarks/19044

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Unix

Control ID: 9df253446f3c54e97c757a3c6f203b35b1430a42dceb4b892cccb51e6517a21c