transparent Squid lopping due to User-Agent: Talkback/1.0; Win32

Hello,

I'm running Squid, with transparent proxy option enabled.
Environment: FreeBSD 2.2.7, IP-Filter 3.2.9, Squid 2.0.patch2.

natrules and squid.conf are configured the same way as described in the
FAQ.

The setup works so fine, except sometimes squid loops due to a unknown
request:

1998/11/25 08:37:39| parseHttpRequest: Request is '/spiral-bin/Collector.dll'
1998/11/25 08:37:39| parseHttpRequest: req_hdr = {Content-Length: 49
User-Agent: Talkback/1.0; Win32
Content-Type: application/x-spiral-fcmp

FCMP}
1998/11/25 08:37:39| parseHttpRequest: end = {FCMP}
1998/11/25 08:37:39| parseHttpRequest: prefix_sz = 137, req_line_sz = 41
1998/11/25 08:37:39| cbdataAdd: 0x193400
1998/11/25 08:37:39| parseHttpRequest: Request Header is
Content-Length: 49
User-Agent: Talkback/1.0; Win32
Content-Type: application/x-spiral-fcmp

1998/11/25 08:37:39| mime_get_header: looking for 'Host'
1998/11/25 08:37:39| parseHttpRequest: NAT open failed: (13) Permission
denied
1998/11/25 08:37:39| parseHttpRequest: Method is 'POST'
1998/11/25 08:37:39| parseHttpRequest: Request is
'/spiral-bin/Collector.dll'
1998/11/25 08:37:39| parseHttpRequest: req_hdr = {Content-Length: 49
User-Agent: Talkback/1.0; Win32
Content-Type: application/x-spiral-fcmp

The lines listed above are repeated in the cache.log (ALL,9) until squid
exits due to exhausted virtual memory, or the machine freezes.

I could not manage to trace the origin of the bogus request.

Does anyone know what is:

User-Agent: Talkback/1.0; Win32
Content-Type: application/x-spiral-fcmp
                                              

???

Any help will be much appreciated.
Thanks.

Best regards,

Wagner
Received on Wed Nov 25 1998 - 07:03:48 MST