squid proxy defaults to port 3128 For a searchable port list try the one on my site: http://www.ccgsecurity.com
The are probably scaning for open proxies in order to surf anonymously off you, or looking for an exploit. One recent one can be found here: http://www.security-focus.com/cgi-bin/vulns-item.pl?section=discussion&i d=3495 M. Dante Mercurio, CCNA, MCSE+I, CCSA Consulting Group Manager [EMAIL PROTECTED] Continental Consulting Group, LLC www.ccgsecurity.com -----Original Message----- From: Craig Van Tassle [mailto:[EMAIL PROTECTED]] Sent: Monday, December 10, 2001 1:49 PM To: secuirty-basics Subject: Squid Proxy Hello Everyone. I'v been noticeing in my snort logs a lot of Squid Proxy attemts. My box is setup as a firewall/gateway for one of my friends but i dont think that hes causing them (unless hes capable of spoofing what NIC they come in on)I was wondering what could be causing the scans? and what port Squid proxy uses? And also what kind of danger do these scans present to the secruity of my computer? Thanks Craig
