[squid-users] Possible squid exploit?

Hi everyone!

I have a network setup such that my router will only throw dest port 80 &
8080 traffic (Transparent proxy) to my squid server.
Squid is listening to port 80 and 8080 only. I've got an acl that deny the
CONNECT method for being used for all ports except 443.

When I do a netstat I found out that:

myserverip:44271 202.103.8.114:4365

where 203.103.8.114 is ftp1.tvdown.com

The strange thing is that I cannot see any mention of this IP or domain
inside access.log.

What could have cause squid to connect to that high port?

Thanks
Liz

_________________________________________________________________
Find love on MSN Personals http://personals.msn.com.sg/
Received on Thu May 13 2004 - 01:34:31 MDT