[FUG-BR] [OT] proxy sendo acessado externamente...

Leo Garcia getz.leo em gmail.com
Segunda Outubro 15 14:05:34 BRST 2007


junior em gujao.com escreveu:
> Pessoal, estava dando uma olhada em meus logs do squid e notei que tem
> usuários utilizando meu proxy de fora, aí está uma parte do log:
> 
> 192463912.267    989 61.217.157.133 TCP_DENIED/403 1405 CONNECT
> 210.208.161.4:25 - NONE/- text/html
> 1192463912.267    989 59.115.3.113 TCP_DENIED/403 1409 CONNECT
> 220.130.211.136:25 - NONE/- text/html
> 1192463912.267    989 219.189.92.13 TCP_DENIED/403 1629 GET
> http://www60.megaupload.com/files/0f5219a3020ea478b362150c5822ad89/[da]Top_wo_Nerae_Gunbuster_Renewal_04_[www.da-anime.org].rmvb
> - NONE/- text/html
> 1192463912.267    989 219.189.92.13 TCP_DENIED/403 1427 GET
> http://www.megaupload.com/? - NONE/- text/html
> 1192463912.267    989 219.87.65.168 TCP_DENIED/403 1405 CONNECT
> 140.123.5.112:25 - NONE/- text/html
> 1192463912.267    989 59.115.3.113 TCP_DENIED/403 1399 CONNECT
> 61.31.24.3:25 - NONE/- text/html
> 1192463912.373     25 219.87.65.183 TCP_DENIED/403 1401 CONNECT
> 168.95.5.44:25 - NONE/- text/html
> 1192463912.373     25 77.235.101.13 TCP_DENIED/403 1407 CONNECT
> login.icq.com:443 - NONE/- text/html
> 1192463912.373     25 219.87.65.172 TCP_DENIED/403 1405 CONNECT
> 210.59.228.93:25 - NONE/- text/html
> 1192463912.373     25 61.31.134.223 TCP_DENIED/403 1407 CONNECT
> 219.87.137.173:25 - NONE/- text/html
> 1192463912.373     25 218.169.58.10 TCP_DENIED/403 1403 CONNECT
> 168.95.6.124:25 - NONE/- text/html
> 1192463912.373     25 61.31.169.180 TCP_DENIED/403 1401 CONNECT
> 168.95.5.75:25 - NONE/- text/html
> 1192463912.478      1 61.31.169.180 TCP_DENIED/403 1401 CONNECT
> 168.95.5.41:25 - NONE/- text/html
> 1192463912.490      1 219.87.65.165 TCP_DENIED/403 1409 CONNECT
> 220.130.216.177:25 - NONE/- text/html
> 1192463912.532      1 219.87.65.164 TCP_DENIED/403 1405 CONNECT
> 210.59.228.42:25 - NONE/- text/html
> 1192463912.628    255 192.168.1.249 TCP_MISS/200 442 GET
> http://www.google-analytics.com/__utm.gif? - DIRECT/64.233.177.147
> image/gif
> 1192463912.662      7 61.31.169.180 TCP_DENIED/403 1403 CONNECT
> 163.29.36.71:25 - NONE/- text/html
> 1192463912.786      0 61.31.172.87 TCP_DENIED/403 1405 CONNECT
> 203.75.169.60:25 - NONE/- text/html
> 1192463912.941    494 192.168.1.249 TCP_MISS/200 4002 GET
> http://ads.globo.com/RealMedia/ads/adstream_mjx.ads/globo.com/globo.com/home/1944039374@Frame1,Left1,Middle,x01,x02,x03?
> - DIRECT/201.7.176.12 application/x-javascript
> 1192463913.134     46 219.189.92.13 TCP_DENIED/403 1427 GET
> http://www.megaupload.com/? - NONE/- text/html
> 1192463913.362    227 219.189.92.13 TCP_DENIED/403 1577 GET
> http://www64.megaupload.com/files/7e901a1f61b8232205b193de0bcb3e6e/Gunbuster2-04[www.da-anime.org].avi
> - NONE/- text/html
> 1192463913.380      5 61.31.172.87 TCP_DENIED/403 1407 CONNECT
> 163.21.249.141:25 - NONE/- text/html
> 1192463913.380      5 218.169.58.10 TCP_DENIED/403 1403 CONNECT
> 168.95.6.185:25 - NONE/- text/html
> 1192463913.514     11 219.87.65.162 TCP_DENIED/403 1405 CONNECT
> 220.130.2.166:25 - NONE/- text/html
> 1192463913.617      3 59.115.3.113 TCP_DENIED/403 1403 CONNECT
> 168.95.6.115:25 - NONE/- text/html
> 1192463913.884      5 61.217.157.133 TCP_DENIED/403 1403 CONNECT
> 59.124.28.97:25 - NONE/- text/html
> 1192463913.928      1 219.87.65.172 TCP_DENIED/403 1403 CONNECT
> 163.23.101.2:25 - NONE/- text/html
> 
> 
> 
> Tem como fazer um bloqueio pra que só tenha acesso ao proxy a minha rede
> interna ?
> 
> 
> Grato,
> 
> 

Fecha a porta no firewall ou tira o LISTEN da interface externa.

!


Mais detalhes sobre a lista de discussão freebsd