Re: [squid-users] my squid box spoofed !!

From: Chris Knipe <savage@dont-contact.us>
Date: Mon, 16 May 2005 09:46:17 +0200

On Mon, May 16, 2005 at 10:42:31AM +0300, Alex wrote:
> Dear All,
>
> i have a problem with my squid proxy.. suddenly its performance decrease
> and i never get the speed i expect from my squid box, and when i tail to
> access.log i find a weird line of information there,, please find it below :
>
> 1115668842.640 14680 61.224.206.211 TCP_MISS/200 824 CONNECT
> 205.188.156.185:25 - DIRECT/205.188.156.185 -
>

Your squid box is a open relay for the entire world to use, and everyone
is more than likely accessing the internet though it, sending thousands
of spam emails, and what not.

I would suggest that you have a immediate look at your ACLs and tie them
down.

--
Chris.
Received on Mon May 16 2005 - 01:53:25 MDT

This archive was generated by hypermail pre-2.1.9 : Wed Jun 01 2005 - 12:00:02 MDT