[squid-users] Squid + TCP Connection

From: Lizzy Dizzy <lizzy_99@dont-contact.us>
Date: Thu, 06 May 2004 09:10:50 +0000

Hi everyone!

I have a network setup such that my router will only throw dest port 80 &
8080 traffic to my squid server.
Squid is listening to port 80 and 8080 only. I've got an acl that deny the
CONNECT method for being used for all ports except 443.

When I do a netstat I found out that:

myserverip:44271 202.103.8.114:4365

where 203.103.8.114 is ftp1.tvdown.com

The strange thing is that I cannot see any mention of this IP or domain
inside access.log.

Is there a possibility that the server is compromise?

_________________________________________________________________
Take a break! Find destinations on MSN Travel. http://www.msn.com.sg/travel/
Received on Thu May 06 2004 - 03:22:26 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Jun 01 2004 - 12:00:01 MDT