Re: [squid-users] log problems

Yes it is a new virus, you should get your virus scanners updated to clean the infection

The www.opasoft.com site has been taken down so you aren't downloading any new information, but the virus is continually trying to get out which is why your log is filling up.

Eric

>>> Shantanu <dcad123@yahoo.com> 10/02/02 03:31pm >>>
Hi,
I use squid 2.4 STABLE4 on LAN of 15 machines.
Now, I have some kinda virus (I think) on 2
windows machines which is sending http queries
thru' squid proxy. This thing appears in the log,
1033570523.745 2 192.168.10.9 TCP_MISS/503
1155 GET
http://www.opasoft.com/work/scheduler.php? -
NONE/- -
many times.

Now, i have 2 problems,
1. We pay per Mb of data downloaded. Does this
mean we are downloading more data? But then there
is no site by name www.opasoft.com
2. My access.log file is growing at alarming
rate.
It becomes around 1Gb+ in one day. So, I am
running out of disk space even though I rotate
logs every day in the morning. I don't want to
rotate logs more than that.
How do I prevent this? Can I prevent that thing
to be logged at all.
Please tell me how to solve the problem?
Thanks for help in advance.
Cheers.
-Shant

__________________________________________________
Do you Yahoo!?
New DSL Internet Access from SBC & Yahoo!
http://sbc.yahoo.com

######################################################################
                         Warning

This email message and any attached files may contain information
that is confidential and subject of legal privilege intended only
for use by the individual or entity to whom they are addressed. If
you are not the intended recipient or the person responsible for
delivering the message to the intended recipient be advised that
you have received this message in error and that any use, copying,
circulation, forwarding, printing or publication of this message or
attached files is strictly forbidden, as is the disclosure of the
information contained therein. If you have received this message in
error, please notify the sender immediately and delete it from your
Inbox.

www.nca.gov.au
######################################################################
Received on Wed Oct 02 2002 - 00:12:25 MDT