Squid security
Recently, I had someone trying to browse the web from one of our servers
via squid. Luckily, I didn't need squid for this machine, so I took it
off and emailed the hostmaster of the domain the person was doing it
from..luckily the IP address was the same. i also managed to get the
IP address blocked by our ISP.
On another server, which I have squid running and want running, I keep
getting accesses from http://service.bfast.com/bfast/serve and someone
seems to be accessing web pages late at night when everyone has gone
home. Trouble is, the IP addresses that access squid don't have host
names (ie. they don't exist) and they keep changing. Is there any way
to block access to this and is there a good FAQ, etc.
It seems strange though, as the access is every few minutes and the
pages accessed have ads involved,while the first person (above) was
accessing squid regularly in spurts.
Thanks
Robert..
Reply to: