--- rpms/e-smith-proxy/sme9/e-smith-proxy.spec	2014/01/30 20:40:04	1.4
+++ rpms/e-smith-proxy/sme9/e-smith-proxy.spec	2015/04/14 09:01:10	1.5
@@ -1,10 +1,10 @@
-# $Id: e-smith-proxy.spec,v 1.3 2014/01/30 06:45:29 burnat Exp $
+# $Id: e-smith-proxy.spec,v 1.4 2014/01/30 20:40:04 burnat Exp $
 
 Summary: e-smith server and gateway - proxy module
 %define name e-smith-proxy
 Name: %{name}
 %define version 5.4.0
-%define release 3
+%define release 4
 Version: %{version}
 Release: %{release}%{?dist}
 License: GPL
@@ -15,6 +15,7 @@ Patch2: e-smith-proxy-5.4.0-remove_obsol
 Patch3: e-smith-proxy-5.4.0-remove_obsolete_D_arg.patch
 Patch4: e-smith-proxy-5.4.0-convert_acl_to_cidr.patch
 Patch5: e-smith-proxy-5.4.0-squid_additionnal_SSLports.patch
+Patch6: e-smith-proxy-5.4.0-deny_self_dst.patch
 BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot
 BuildArchitectures: noarch
 Requires: e-smith-base
@@ -31,6 +32,9 @@ AutoReqProv: no
 e-smith server and gateway software - proxy module.
 
 %changelog
+* Tue Apr 14 2015 Daniel Berteaud <daniel@firewall-services.com> 5.4.0-4.sme
+- Prevent forwarding loop when talking directly to squid port [SME: 8907]
+
 * Thu Jan 30 2014 chris burnat <devlist@burnat.com> 5.4.0-3.sme
 - Modify template to allow Squid proxy https access to ports other than 443,563 using db command [sme:8161] 
 - Codes by John Bennett
@@ -697,6 +701,7 @@ e-smith server and gateway software - pr
 %patch3 -p1
 %patch4 -p1
 %patch5 -p1
+%patch6 -p1
 
 %build
 perl createlinks