On Monday 10 December 2001 12:49 pm, Craig Van Tassle wrote:
> Hello Everyone. I'v been noticeing in my snort logs a lot of Squid Proxy
> attemts. My box is setup as a firewall/gateway for one of my friends but i
> dont think that hes causing them (unless hes capable of spoofing what NIC
> they come in on)I was wondering what could be causing the scans? and what
> port Squid proxy uses? And also what kind of danger do these scans present
> to the secruity of my computer? Thanks
> Craig
squid uses port 3128 by default, many irc networks now scan a connecting
machine for running proxies, this could be causing the alert
