RE: Squid Proxy

From: Dante Mercurio (
Date: 12/11/01

Date: Tue, 11 Dec 2001 00:16:46 -0500
From: "Dante Mercurio" <>
To: "Craig Van Tassle" <>, "secuirty-basics" <>

squid proxy defaults to port 3128
For a searchable port list try the one on my site:

The are probably scaning for open proxies in order to surf anonymously
off you, or looking for an exploit. One recent one can be found here:

M. Dante Mercurio, CCNA, MCSE+I, CCSA
Consulting Group Manager
Continental Consulting Group, LLC

-----Original Message-----
From: Craig Van Tassle []
Sent: Monday, December 10, 2001 1:49 PM
To: secuirty-basics
Subject: Squid Proxy

Hello Everyone. I'v been noticeing in my snort logs a lot of Squid
Proxy attemts. My box is setup as a firewall/gateway for one of my
friends but i dont think that hes causing them (unless hes capable of
spoofing what NIC they come in on)I was wondering what could be causing
the scans? and what port Squid proxy uses? And also what kind of
danger do these scans present to the secruity of my computer?