Could it possibly be that your firewall rules aren't quite tight enough and
someone is relaying off of you?
And if that is the case what does someone have to gain by relaying off of
someone elses proxy?
Billy
--- Stephen Camilleri <stephen.camilleri@datastream.com.mt> wrote:
> Hi all,
>
> We've just enabled a Squid cache (Stable 7) in transparent mode running wccp
> 1 with a cisco router. WCCP is enabled on a selected interface where a very
> restricted range of IPs are possible. I would understand that in
> /var/log/access.log I should only see IPs within this restricted subnet.
> However I keep on getting a large number of entries originating from
> 204.29.169.241 which it seems is another squid server running stable7 8
> timezones away!!
>
> Any clues would be really appreciated
>
> 204.29.169.241 - - [28/Aug/2002:14:25:27 +0200] "CONNECT 65.54.254.129:25
> HTTP/1.0" 200 448 TCP_MISS:DIRECT
> 204.29.169.241 - - [28/Aug/2002:14:25:28 +0200] "CONNECT 65.54.254.129:25
> HTTP/1.0" 200 452 TCP_MISS:DIRECT
> 204.29.169.241 - - [28/Aug/2002:14:25:29 +0200] "CONNECT 65.54.254.129:25
> HTTP/1.0" 200 306 TCP_MISS:DIRECT
>
>
> Stephen
>
__________________________________________________
Do You Yahoo!?
Yahoo! Finance - Get real-time stock quotes
http://finance.yahoo.com
Received on Wed Aug 28 2002 - 08:35:03 MDT
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:09:51 MST