Solved

Squid server - downandup virus

Posted on 2013-02-07
3
386 Views
Last Modified: 2013-03-08
I have a squid proxy working with dansguardian.

My ISP sends me this notification:

>  Rete:        MYNETWORK (x.x.x.x/xx)
>  IP locale:    x.x.x.x
>
>  Data e ora:    2013-01-28 08:02:26 UTC+0
>  porta locale:    1670
>  IP remoto:    149.20.56.32:80
>  Malware:    downadup
>  HTTP request:    GET /search?q=26 HTTP/1.0
>  HTTP agent:    Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

What can I do to solve the problem?

Thanks
0
Comment
Question by:ltpitt
  • 2
3 Comments
 
LVL 76

Expert Comment

by:arnold
Comment Utility
What is the problem? Is dansguardian erroneously reports a virus infected/laden response?

Or are they suggesting your webserver is infected?
0
 
LVL 1

Accepted Solution

by:
ltpitt earned 0 total points
Comment Utility
I solved the problem blocking from iptables the suggested ip
0
 
LVL 1

Author Closing Comment

by:ltpitt
Comment Utility
Worked for me
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

I have seen several blogs and forum entries elsewhere state that because NTFS volumes do not support linux ownership or permissions, they cannot be used for anonymous ftp upload through the vsftpd program.   IT can be done and here's how to get i…
Note: for this to work properly you need to use a Cross-Over network cable. 1. Connect both servers S1 and S2 on the second network slots respectively. Note that you can use the 1st slots but usually these would be occupied by the Service Provide…
This tutorial demonstrates a quick way of adding group price to multiple Magento products.
This video demonstrates how to create an example email signature rule for a department in a company using CodeTwo Exchange Rules. The signature will be inserted beneath users' latest emails in conversations and will be displayed in users' Sent Items…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

7 Experts available now in Live!

Get 1:1 Help Now