Re: [squid-users] Problem in squid due to virus

From: Kancha . <>
Date: Tue, 26 Feb 2002 07:11:48 -0800 (PST)

put http_access allow officelan after the nimda deny

--- Nithya_Ananth/MAA/IN/ wrote:

<FONT face="Default Sans Serif, Verdana, Arial,
Helvetica, sans-serif" size=2><DIV><FONT face="Default
Sans Serif, Verdana, Arial, Helvetica, sans-serif"
size=2>&nbsp;<DIV>Hi,</DIV><DIV>&nbsp; we are using
squid caching server for our corporate
purpose.&nbsp;&nbsp;The details are as
: &nbsp;&nbsp; RedHat Linux 6.2</DIV><DIV>Wccp :
Version 1</DIV><DIV>Router: Cisco 7206</DIV><DIV>Squid
: squid
Our Caching server is working fine for the past 15
days. Now we found a problem. If anyone&nbsp;from the
internal segments generate virus. it is directly
hitting the cache, eventhough we put the ACL in the
squid.conf file. Our configuraton is as
follows.</DIV><DIV>&nbsp;&nbsp;&nbsp; </DIV><DIV>acl
nimda1 url_regex root.exe</DIV><DIV><DIV>acl nimda2
url_regex command.exe</DIV><DIV><DIV>acl nimda3
url_regex readme.exe</DIV><DIV><DIV>acl nimda4
all src</DIV><DIV><DIV>acl src office!
</DIV></DIV><DIV>&nbsp;</DIV><DIV>http_access allow
officelan</DIV><DIV>&nbsp;</DIV><DIV>http_access deny
nimda1</DIV><DIV><DIV>http_access deny
nimda2</DIV><DIV><DIV>http_access deny
nimda3</DIV><DIV><DIV>http_access deny
deny all</DIV><DIV>&nbsp;</DIV><DIV>Becos our
corporate proxy IP is So we want to get
the requests only from the particular ip(For our
security issues). But if any of the system in the same
Network ( has virus&nbsp;, simply it
is hitting the caching server and the performance is
degraded like anything. No other users can able to
browse. </DIV><DIV>&nbsp;&nbsp; Also I have put the
ipchains rule in the Linux Box. My IP chain rule is as
follows</DIV><DIV>&nbsp;</DIV><DIV><DIV>ipchains -A
input -s&nbsp; -d 80 -j 3128
REDIRECT (This is for my Squid operation, it has to
redirect the input to port 3128)</DIV></DIV><DI!
V>ipchains -A input -s
-d -j ACCEPT <DIV></DIV><DIV><DIV>ipchains
-A input -s -d
-j DENY</DIV><DIV>&nbsp;</DIV></DIV><DIV>&nbsp;&nbsp;
is there any solution to overcome this. How to
restrict the Virus the&nbsp;bug in squid? or
is the problem in wccp1.0? Can any one help

Do You Yahoo!?
Yahoo! Sports - Coverage of the 2002 Olympic Games
Received on Tue Feb 26 2002 - 08:11:50 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:06:32 MST