Re: [squid-users] code red is making horrible on our network

> Do you have a squid acl denying code-red urls?

ACLs won't do. The request is denied by Squid by default because Squid
considers them invalid and returns a 411 error (and logs NONE/411).

The problem seems to be Squid trying to send the error back to the client.
Since the originating computer's bandwidth is too busy with Code Red, Squid
can't send the errors fast enough, taking all SYN connections made available
by the kernel.

Looks like changing tcp_max_syn_backlog to a higher number fix the problem
because, even though the box will have to work hard anyway, at least it
won't be stopped by the Code Red flood.

---
Luiz Lima
Image Link Internet
http://www.imagelink.com.br