Re: [squid-users] Security Issue with Squid (help!)

2007-08-05 Thread Matus UHLAR - fantomas
On 26.07.07 12:10, Reid wrote: This morning while using squid as a proxy, whenever I went to a popular website (e.g. Hotmail, Amazon), I noticed my Internet Explorer browser warning me about cookies from restricted sites. The list of sites was weird stuff like

Re: [squid-users] Security Issue with Squid (help!)

2007-07-30 Thread Henrik Nordstrom
On tor, 2007-07-26 at 21:47 -0700, Reid wrote: I've only been running this squid server for about a week so I doubt this is an unusual problem. Can anyone help?? More observations: 1- I suspect that this problem began when someone using my proxy was doing a click on a bunch of sites

[squid-users] Security Issue with Squid (help!)

2007-07-26 Thread Reid
This morning while using squid as a proxy, whenever I went to a popular website (e.g. Hotmail, Amazon), I noticed my Internet Explorer browser warning me about cookies from restricted sites. The list of sites was weird stuff like kikclick.com/ovosearch.com/777seo.com (stuff that had nothing to

Re: [squid-users] Security Issue with Squid (help!)

2007-07-26 Thread Reid
I've only been running this squid server for about a week so I doubt this is an unusual problem. Can anyone help?? More observations: 1- I suspect that this problem began when someone using my proxy was doing a click on a bunch of sites to make money type program. Now, when regular visitors

Re: [squid-users] Security Issue with Squid (help!)

2007-07-26 Thread Robert Collins
On Thu, 2007-07-26 at 21:47 -0700, Reid wrote: I've only been running this squid server for about a week so I doubt this is an unusual problem. Can anyone help?? I'd suggest trying a spyware/antivirus program on your client, assuming you are running a stock squid without content-alteration

Re: [squid-users] Security Issue with Squid (help!)

2007-07-26 Thread Reid
Yes, that was my first thought. However, when I check the squid logs it shows many/all users being served those iframed websites within pages that they requested. And since these are remote users, the various clients have nothing in common. I'd suggest trying a spyware/antivirus program on