[squid-users] Web site got hack through squid

From: Tom Le <tomle@dont-contact.us>
Date: Sat, 04 Sep 2004 21:49:02 -0700

Hi,

I have a website that sits behind squid 2.5 and it got hack into today.
Someone from this ip address,
200.148.134.206, has put few files into my website through squid. The
content of the index.html is

"Simiens Crew 2004 Ownz U"

Here is the log from squid

1094326387.752 899375 200.148.134.206 TCP_MISS/000 0 PUT
http://<hostname>/index.html - DIRECT/<my website ip adress> -

Can any of you give me some insight into this problem, and how to tight
my squid server down?

Thanks

-- 
----------------------------
Tom Le
Phone : (604) 612-6617
Email : tomle@telus.net
----------------------------
******************************************************************
This electronic communication (email) is intended only for the use
of the addressee and may contain  information which is  privileged
and confidential.  If you are not  the intended recipient, you are
hereby notified that any dissemination, distribution or copying of
this email is strictly prohibited. If you have received this email
in error, please  reply to the  sender immediately  and delete the
original and all copies. Thank you.
****************************************************************** 
Received on Sat Sep 04 2004 - 22:46:17 MDT

This archive was generated by hypermail pre-2.1.9 : Fri Oct 01 2004 - 12:00:02 MDT