Re: too many TCP_DENIED messages ...

Hello Michale and other members of the list,

Yes, I had the same problem. Here is an excerpt from the email that
I was sending to users in the company I work for (big, big corporation).
Your problem is probably related to a misconfigured Real Player setup
(sigh, how many users install Microsoft software without any understanding
what it does)!!!

Regards,

Dusan

===================== cut here ===============================

Our Internet logs show that your PC tries to access a specific web site
every minute of every hour (day and night).

One example from the log file:

192.168.10.33 TCP_DENIED/407 1478 GET
http://channels.real.com/getlatest.glh?

So, every minute your PC sends 1478 bytes.

Because you are not providing the proper password (error 407 means
HTTP_PROXY_AUTHENTICATION_REQUIRED), you are denied access to
it.

It is obvious that some background job is running on your PC. It
unnecessarily
floods your local network, and puts unneeded load on the Internet servers.

Would you please investigate the cause of the problem and rectify it.

Possible cause of your problem is misconfigured Real Player. If you are
using Real Player version 6, please check the following setting
in Options -> Preferences -> Content menu:

     Enable automatic headline update

It seems that this setting needs to be turned off.

If Options menu is not visible in your toolbar, then make sure to enable it
through View -> Normal menu!

If you are using an earlier version of Real Player, I suggest to look for
similar setting.

===================== cut here ===============================

Michael.Dean@detir.qld.gov.au on 14/05/99 10:13:02

To: squid-users@ircache.net
cc: (bcc: Dusan Baljevic/AUST/CSC)
Subject: Re: too many TCP_DENIED messages ...

On Wed, 12 May 1999 nagy_l@vaxst2.tii.matav.hu wrote:
> Hi!
>
> We use an ldap authentication with squid 2.1.patch2.
>
> when we analyse the access.log then too many the TCP_DENIED messages in
the log
> file.
>
> Some wrong urls :
>
> http://channels.real.com/getlatest.glh?
we had 93000 hits thru our squid proxy yesterday and 2700 of those were
TCP_DENIED to this URL. Does anybody know what is causing this?? The
TCP_DENIED's seem to be happening when people turn on their PC's. Some
Microsoft thing???

--
 Michael.Dean@detir.qld.gov.au ,-_|\  UNIX Support
                              /     * Dept of Employment, Training
  Phone: +61 7 3247 5724      _,-._/ and Industrial Relations
    Fax: +61 7 3247 9111      ^    v  http://unix/
                              |
                    yes I *am* using pine-4.10