RE: [squid-users] is it a DOS attack ??

On Sat, 14 Feb 2004, Danish Khan wrote:

> I have configured my box with 8192 FD but still I got warnings of FD's and
> tooo many comm.(23) Port error WHY plz update :(
>
> Danish
>
> -----Original Message-----
> From: Mahmood Ahmed [mailto:braveheart@buraak.net.pk]
> Sent: Saturday, February 14, 2004 10:24 PM
> To: squid-users@squid-cache.org
> Subject: [squid-users] is it a DOS attack ??
>
> Hello List!
>
> I have been facing this strange problem for last 3 days. I hope some one
> here will be able to shed light on it. I dont know wheather its a bug or a
> virus or a DOS attack but it is hitting my squid box very hard. in my access
>
> log i am seeing a lot of these.
>
> 1076806934.151 451 202.133.44.214 TCP_MISS/000 0 GET
> http://www.microsoft.com/ - NONE/- -
> 1076806934.163 461 202.133.44.214 TCP_MISS/000 0 GET

This looks to me like a forwarding loop.

Are you using HTTP interception?

Duane W.
Received on Sat Feb 14 2004 - 17:51:06 MST