Re: [squid-users] Squid rebooting every 10 days

From: Alceu R. de Freitas Jr. <glasswalk3r@dont-contact.us>
Date: Wed, 8 Jan 2003 14:09:43 -0300 (ART)

Well, somebody is using your proxy as gateway to run
"script kiddies" tools to find flaws in IIS or is
asking the proxy itself by it. Sometimes I found these
in a Apache server, but never in Squid.

Maybe the logs are growing too much, and you´re
running without disk space, I don´t know...

Can´t you verify the IP from where these requisitions
are comming? The better is to block them using your
packet filter, if you have one. Or create ACL to block
such requisitions.

 --- Monah Baki <mbaki@infoa.com> escreveu: > Hi all,
>
> I'm running squid-2.4 stable7 on OpenBSd 3.1(sparc),
> it's the only
> cache server, no peers. I've had it running for 10
> days twice now
> before it reboots itself. Unfortunately, the server
> is 2000 miles away,
> and all I have are the logs. I noticed the following
> in the cache.log
> file (repeatedly)
>
> 2003/01/02 23:25:26| WARNING: Forwarding loop
> detected for:
> GET
>
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\
> HTTP/1.0
> Accept: */*
> Via: 1.1 ac1.a4cn2.net:3128 (Squid/2.4.STABLE7)
> X-Forwarded-For: 128.52.22.53
> Host: 128.52.41.222
> Cache-Control: max-age=259200
> Connection: keep-alive
>
> Any ideas???
>
> Thank you
>

=====
Alceu Rodrigues de Freitas Junior
--------------------------------------
glasswalk3r@yahoo.com.br
http://www.imortais.cjb.net

--
Notice that the stiffest tree is most easily cracked, while the bamboo or willow survives by bending with the wind. -----  Bruce Lee
_______________________________________________________________________
Busca Yahoo!
O melhor lugar para encontrar tudo o que você procura na Internet
http://br.busca.yahoo.com/
Received on Wed Jan 08 2003 - 10:09:51 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:12:35 MST