[squid-users] Proxy doing Denial Of Service attack

Hi there,

It appears as though my proxy is doing a Denial Of Service attack to a range
of IP addresses. My firewall folks have given me a list stating the IP's
that the proxy is sending requests to and the source IP being my proxy. I
assumed that this was an internal thing but having looked through my
access.log files and searching for the destination IP's I can't find them.
It appears as though the calls are being made without being cached. Could
this be done from outside? The service is listed as "tcp-2112-ddos". The
proxy makes six calls per IP then moves on. Is there a way to monitor this
activity other than the access.log files? Any help, opinions, etc. are
greatly appreciated.

Thanks
Perry
Received on Thu Oct 10 2002 - 11:50:56 MDT