0096-squid-uninstalled - Ensure Squid HTTP Proxy Server Is Not Installed¶
Rule ID¶
- 0096-squid-uninstalled
Category¶
- system
Level¶
- warn
Supported Versions¶
- Linux
Description¶
- Squid is a standard proxy server used in many distributions and environments.
Scan Frequency¶
0 * * * *
Rationale¶
-
Unless the system is specifically configured to act as a proxy server, it is recommended to remove the Squid package to reduce the potential attack surface.
-
Note: Multiple HTTP proxy servers exist. They should be checked and removed if not needed.
Risk Items¶
-
Hacker intrusion
-
Data leakage
-
Network security
-
Cryptojacking risk
-
Botnet risk
Audit Method¶
- Execute the following command to verify whether Squid is installed.
Remediation¶
- Run the command to remove Squid.
Impact¶
- None
Default Value¶
- None
References¶
- None
CIS Controls¶
- Version 7
9.2 Ensure Only Approved Ports, Protocols, and Services Are Running
Ensure that only network ports, protocols, and services listening on a system with validated business needs are running on each system.