Re: [squid-users] Squid rebooting every 10 days

From: Monah Baki <mbaki@dont-contact.us>
Date: Wed, 8 Jan 2003 13:03:13 -0500

The server resides in an ISP, and that class is part of their network.
I noticed that the host IP on that network (128.52.41.xx) changes with
the error that I mentioned.
My ACL allows only the IP address that the ISP has given me, and denies
everyone else.

Thank you.

On Wednesday, January 8, 2003, at 12:09 PM, Alceu R. de Freitas Jr.
wrote:

> Well, somebody is using your proxy as gateway to run
> "script kiddies" tools to find flaws in IIS or is
> asking the proxy itself by it. Sometimes I found these
> in a Apache server, but never in Squid.
>
> Maybe the logs are growing too much, and you´re
> running without disk space, I don´t know...
>
> Can´t you verify the IP from where these requisitions
> are comming? The better is to block them using your
> packet filter, if you have one. Or create ACL to block
> such requisitions.
>
> --- Monah Baki <mbaki@infoa.com> escreveu: > Hi all,
>>
>> I'm running squid-2.4 stable7 on OpenBSd 3.1(sparc),
>> it's the only
>> cache server, no peers. I've had it running for 10
>> days twice now
>> before it reboots itself. Unfortunately, the server
>> is 2000 miles away,
>> and all I have are the logs. I noticed the following
>> in the cache.log
>> file (repeatedly)
>>
>> 2003/01/02 23:25:26| WARNING: Forwarding loop
>> detected for:
>> GET
>>
> /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\
>> HTTP/1.0
>> Accept: */*
>> Via: 1.1 ac1.a4cn2.net:3128 (Squid/2.4.STABLE7)
>> X-Forwarded-For: 128.52.22.53
>> Host: 128.52.41.222
>> Cache-Control: max-age=259200
>> Connection: keep-alive
>>
>> Any ideas???
>>
>> Thank you
>>
>
> =====
> Alceu Rodrigues de Freitas Junior
> --------------------------------------
> glasswalk3r@yahoo.com.br
> http://www.imortais.cjb.net
> --
> Notice that the stiffest tree is most easily cracked, while the bamboo
> or willow survives by bending with the wind. ----- Bruce Lee
>
> _______________________________________________________________________
> Busca Yahoo!
> O melhor lugar para encontrar tudo o que você procura na Internet
> http://br.busca.yahoo.com/
>
Received on Wed Jan 08 2003 - 11:02:55 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:12:35 MST