Hello,
I am trying to understand some weird behaviour from my squid box,
It is on redhat 7.2, 2.4stable3-1.7.2, with iptables
It is also set up to do acceleration and redirection, and not as a
cache, listenting on port 80.
Suddenly it started receiving a lot of http traffic from an
unpriviledged port, to port 80, and started sending from port 80 back.
The access.log shows a lot of traffic to mx machines at aol.com on port
25. (TCP_DENIED 403) is also there. The host is a cw.net
(cable&wireless in houston)
Does anyone know what this is?
Stuart Hume
Catjes Pty Ltd
Telephone : 9460 1434
Mobile : 0403 043 644
Received on Wed Mar 27 2002 - 08:10:24 MST
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:07:07 MST