thanx all for your inputs. i got trapped in a day long meeting yesterday but now reading through the posts i can already see how to reconfigure and tighten the setup. You folks are obviously a notch better than googling... regards. walu. --- On Fri, 8/21/09, Sammy Njoroge <smmynjoroge@gmail.com> wrote:
From: Sammy Njoroge <smmynjoroge@gmail.com> Subject: Re: [Skunkworks] squid+dansgaurdian setup compromised To: skunkworks@lists.my.co.ke Date: Friday, August 21, 2009, 12:22 PM Hi Walu,
Earlier versions of Dansgurdian filter content by matching the url using the domain name so all i have to do to circumvent the whole setup would be find the ip for my favourite banned site and am through then there's the other case of external proxies .Hope that helps
Regards
Sammy Njoroge Andicom Solutions www.andicom.co.ke
----------------------------------------------------------------------
Message: 1
Date: Thu, 20 Aug 2009 23:32:13 -0700 (PDT)
From: Walubengo J <jwalu@yahoo.com>
To: skunk <skunkworks@my.co.ke>
Subject: [Skunkworks] help: squid+dansgaurdian setup compromised.
Message-ID: <840541.39134.qm@web57802.mail.re3.yahoo.com>
Content-Type: text/plain; charset=us-ascii
hey,
I have a basic traditional NAT setup of squid+dansguardian on Linux Ubuntu 8.10. Squid as the proxy and dansguardian as the content manager. My network has suddenly started crawling and /var/log/dansguardian/access.log shows foreign IPs riding on my bandwidth and visiting graphic porn sites with impunity.
Could someone give pointers on where I need to tighten the configs to keep off the external bad boys and girls (IPs) from the riding my proxy server?
walu.
-----Inline Attachment Follows-----
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks Other services @ http://my.co.ke Other lists ------------- Announce: http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks-announce Science: http://lists.my.co.ke/cgi-bin/mailman/listinfo/science kazi: http://lists.my.co.ke/cgi-bin/mailman/admin/kazi/general