Re: [squid-users] ADWARE

I tracked the site down by looking in the Squid access logs.
Essentially I would try to update the ADWARE, watch the proxy server's
access log for the PC's IP address.

Tim

-----------------------------------------------------------
Timothy E. Neto
 Computer Systems Engineer Komatsu Canada Limited
 Ph#: 905-625-6292 x265 1725B Sismet Road
 Fax: 905-625-6348 Mississauga, Canada
 E-Mail: tneto@komatsu.ca L4W 1P9
-----------------------------------------------------------

loop wrote:

>OK, TIM....now all does work, the problem seemed to be the destination:
>".lavasoft.de.edgesuite.net"
>How did you found it?
>
>Thanks, a lot...
>
>loop.-
>
>
>----- Original Message -----
>From: "Tim Neto" <tneto@komatsu.ca>
>To: <squid-users@squid-cache.org>
>Cc: "loop" <ma.teo@adinet.com.uy>
>Sent: Monday, December 13, 2004 1:56 PM
>Subject: Re: [squid-users] ADWARE
>
>
>
>
>>Hello Teo Ma,
>>
>>Please note, the updates for ADWARE is not at www.lavasoft.com. The
>>update server is located in the .lavasoft.de.edgesuite.net DNS domain.
>>If you do not open the domain .lavasoft.de.edgesuite.net the ADWARE
>>update will not work. The ADWARE update proxy client has no provision
>>for authentication. If your Squid configuration is using any type of
>>authentication the ADWARE update will not work.
>>
>>Finally, for Squid user mail list etiquette, please do a reply to
>>all. Others may encounter similar trouble. By replying to the mailing
>>list, you will obtain more help. My replies may not always be the best
>>solution, other Squid administrator may have additional or contrary
>>valid input for your issue.
>>
>>At this point the only way I can be of further assistance is to see a
>>"sanitized" version of your squid.conf. By "sanitized" I mean
>>change your passwords and your IP reference to generic values.
>>
>>Tim
>>
>>-----------------------------------------------------------
>>Timothy E. Neto
>> Computer Systems Engineer Komatsu Canada Limited
>> Ph#: 905-625-6292 x265 1725B Sismet Road
>> Fax: 905-625-6348 Mississauga, Canada
>> E-Mail: tneto@komatsu.ca L4W 1P9
>>-----------------------------------------------------------
>>
>>
>>
>>Tim Neto wrote:
>>
>>
>>
>>>Hello,
>>>
>>>Are you using authentication with your Squid proxying? If so, using
>>>an acl and an http_access allow unauthenticated access to LavaSoft's
>>>update site.
>>>Like:
>>> acl open_lavasoft_de_edgesuite_net dstdomain
>>>.lavasoft.de.edgesuite.net
>>>and
>>> http_access allow mynetworks open_lavasoft_de_edgesuite_net
>>>
>>>Tim
>>>
>>>-----------------------------------------------------------
>>>Timothy E. Neto
>>>Computer Systems Engineer Komatsu Canada Limited
>>>Ph#: 905-625-6292 x265 1725B Sismet Road
>>>Fax: 905-625-6348 Mississauga, Canada
>>>E-Mail: tneto@komatsu.ca L4W 1P9
>>>-----------------------------------------------------------
>>>
>>>
>>>
>>>loop wrote:
>>>
>>>
>>>
>>>>Sorry the software name is: AD-AWARE of LAVASOFT.
>>>>
>>>>
>>>>loop.-
>>>>
>>>>
>>>>
>>>>----- Original Message ----- From: "loop" <ma.teo@adinet.com.uy>
>>>>To: <squid-users@squid-cache.org>
>>>>Sent: Friday, December 10, 2004 2:04 PM
>>>>Subject: [squid-users] ADWARE
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>>HI, GUYS...
>>>>>
>>>>>
>>>>>SOMEBODY KNOWS WHY I CANNOT UPDATE THE "ADWARE SOFTWARE" BEHIND THE
>>>>>SQUID?
>>>>>THE SQUID VERSION IS: Squid Cache: Version 2.5.STABLE5.
>>>>>
>>>>>Thanks...a lot
>>>>>
>>>>>loop.-
>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>
>
>
>
Received on Mon Dec 13 2004 - 13:46:14 MST