[squid-users] Squid and Google Sorry Message

2009-01-16 Thread jeff donovan
Greetings I am running two squid boxes as content filters for a number of schools. Google has recently changed and we are now getting a Sorry you look like a botnet We're sorry... ... but your query looks similar to automated requests from a computer virus or spyware application. To

Re: [squid-users] Squid and Google Sorry Message

2009-01-16 Thread Mark Barlow
MALWARE ALERT! I had this, my PC was infected by a drive by download from an innocent site. 2009/1/16 jeff donovan dono...@beth.k12.pa.us: Greetings I am running two squid boxes as content filters for a number of schools. Google has recently changed and we are now getting a Sorry you

Re: [squid-users] Squid and Google Sorry Message

2009-01-16 Thread Mark Barlow
Some additional thoughts. From memory, when my PC was infected it was bypassing squid and going direct. (My PC was allowed through the firewall for testing) The malware was looking for other sites to infect using Google. As google are already blocking your access I would start looking at your

Re: [squid-users] Squid and Google Sorry Message

2009-01-16 Thread Tim Bates
Mark Barlow wrote: Log all requests to port 80 and look for the PC/s that are trying to access google constantly. Especially at times when it's normally a lower load. At the school I work for, lunchtime is pretty slow as pretty much everyone is off the computers... And nights are obvious too