[plug] Squid access.log

Arie Hol arie99 at ozemail.com.au
Sun Mar 23 23:45:21 WST 2003


At 10:47 PM 23-03-2003 +0800, you wrote:
>Good evening All, 
>
>I recently installed qmail and have noticed these deny messages in the
squid access.log file. To me they look like someone is trying to redirect
through my http server to someone elses mail server, however squid is
denying the request (and rightfully so if it is what I think). 
>

I'm not sure about this - but it is probably email spam servers trying to
use your server as a proxy to send spam.

This happened at uni a couple of weeks ago - when a student set up squid as
a proxy (but didn't configure it correctly) - the spammers  found the proxy
- and started to use it for their own means/ends.

The uni is linked up through PARNET, and as a result of 'all the suspicious
traffic' the uni was blocked from PARNET for the remainder of the weekend.
This upset a lot of other students/staff who could not logon to the uni
servers to do their work.

Regards Arie

>--------------------------------------------<

For the concert of life, nobody has a program.

>--------------------------------------------<



More information about the plug mailing list