Hi
Henrik Nordstrom wrote:
> On Fri, 5 Nov 2004, Tobias Reckhard wrote:
>> 30MB/min respectively) five minutes later, after which the proxy
>> started answering requests for all sorts of pages (among them
>> http://www.google.de) with the data of http://www.immowelt.de.
>
> Can you describe your environment in a little more detail, primarily if
> this is a single Squid with direct Internet connectivity or if there is
> any parent servers involved such as virus scanners or similar.
Sure. This is one of a pair of Squids in a DMZ that is queried by three
internal Squids. The machines also have a TrendMicro VirusWall installed
and have its HTTP scanner configured as a parent type cache_peer. They
are also siblings of one another. So it looks sort of like the following
ASCII art:
DMZ Squid #1 -> VirusWall -------+
3 internal ^ |
Squids ------> | (sibling) +-----> Internet
Squids V |
DMZ Squid #2 -> VirusWall -------+
Note that there are two machines running both DMZ Squid and VirusWall,
with Squid as the front-end to the clients and the VirusWall fetching
the content and scanning it for malware.
Does that help? Why do you ask for virus scanners specifically? That
makes it sound like you have a hunch of sorts.
Regards,
Tobias
Received on Sun Nov 07 2004 - 22:18:49 MST
This archive was generated by hypermail pre-2.1.9 : Wed Dec 01 2004 - 12:00:01 MST