Re: Squid Proxy

From: Jason Kohles (jkohles@redhat.com)
Date: 12/11/01 

Date: Tue, 11 Dec 2001 11:30:27 -0600
From: Jason Kohles <jkohles@redhat.com>
To: Dante Mercurio <dmercurio@ccgsecurity.com>

On Tue, Dec 11, 2001 at 12:16:46AM -0500, Dante Mercurio wrote:
> squid proxy defaults to port 3128
> For a searchable port list try the one on my site:
> http://www.ccgsecurity.com
>
> The are probably scaning for open proxies in order to surf anonymously
> off you, or looking for an exploit. One recent one can be found here:
> http://www.security-focus.com/cgi-bin/vulns-item.pl?section=discussion&i
> d=3495
>
There are also people scanning for open ones they can use to cheat pay per
click banner companies, I discovered this a couple of weeks ago when I found
a squid proxy that had been installed, but never used, was suddenly seeing
a lot of traffic loading only banner ads, but without loading the pages the
ads were contained in. 

-- 
Jason Kohles                                 jkohles@redhat.com
Senior System Architect                      (703)786-8036 (cellular)
Red Hat Professional Consulting              (703)456-2940 (office)