[squid-users] Confused

From: stuart <stuart@dont-contact.us>
Date: Thu, 28 Mar 2002 02:03:02 +1100

Hello,
I am trying to understand some weird behaviour from my squid box,

It is on redhat 7.2, 2.4stable3-1.7.2, with iptables
It is also set up to do acceleration and redirection, and not as a
cache, listenting on port 80.

Suddenly it started receiving a lot of http traffic from an
unpriviledged port, to port 80, and started sending from port 80 back.
The access.log shows a lot of traffic to mx machines at aol.com on port
25. (TCP_DENIED 403) is also there. The host is a cw.net
(cable&wireless in houston)

Does anyone know what this is?

Stuart Hume
Catjes Pty Ltd
Telephone : 9460 1434
Mobile : 0403 043 644
Received on Wed Mar 27 2002 - 08:10:24 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:07:07 MST