De onde vem os pacotes?
Mesmo todos os micros desligados, somente os 2 servidores e o firewall ligado, nos logs aparece vários ips acessando sites sem parar. Eu bloquiei todos os acessos, menos para a rede local (0.0.0.0 deny) e 192.168.1.0 alow. Assim todos os ips de acessos difrente da rede sao bloqueados. o que é diferente da rede 192.168.1.0 é banido(denied). segue o log:
echo: web-proxy,debug,packet 1274980788.182 0 74.222.1.214 TCP_DENIED/403 1326 CONNECT 203.138.181.112:25 - NONE/- text
/html
echo: web-proxy,debug,packet 1274980788.223 1 61.160.212.4 TCP_DENIED/403 1329 GET http://uc250.com/ - NONE/- text/html
echo: web-proxy,debug,packet 1274980788.363 5 122.226.215.230 TCP_DENIED/403 1337 GET http://www.fuj88.com/ - NONE/- te
xt/html
echo: web-proxy,debug,packet 1274980788.637 100 63.147.190.194 TCP_DENIED/403 1326 CONNECT 205.188.251.31:443 - NONE/- te
xt/html
echo: web-proxy,debug,packet 1274980788.823 1 122.226.215.229 TCP_DENIED/403 1363 GET http://www.haosi888.com/class.asp
? - NONE/- text/html
[admin@Matriz] >
echo: web-proxy,debug,packet 1274980788.980 8718 192.168.1.68 TCP_MISS/200 13038 GET http://estrela.angeloni.com.br/angelo
ni_HTTP/ema/eletro110/images/top_ang_a.jpg - DIRECT/201.2.248.40 image/jpeg
echo: web-proxy,debug,packet 1274980789.053 0 64.56.64.80 TCP_DENIED/403 1322 CONNECT 222.15.69.195:25 - NONE/- text/ht
ml
echo: web-proxy,debug,packet 1274980789.056 1 202.105.176.172 TCP_DENIED/403 1343 GET http://www.zhaosf185.com - NONE/-
text/html
echo: web-proxy,debug,packet 1274980789.062 1 211.103.170.135 TCP_DENIED/403 1373 GET http://www.guangsu.cc/example_sho
w.asp? - NONE/- text/html
echo: web-proxy,debug,packet 1274980789.205 2 60.209.205.34 TCP_DENIED/403 1373 GET http://www.jimobmw.com/Class/Class.
asp? - NONE/- text/html
echo: web-proxy,debug,packet 1274980789.312 10 122.226.215.227 TCP_DENIED/403 1337 GET http://www.fuj88.com/ - NONE/- te
xt/html
echo: web-proxy,debug,packet 1274980789.347 34 63.147.190.194 TCP_DENIED/403 1326 CONNECT 205.188.251.36:443 - NONE/- te
xt/html
echo: web-proxy,debug,packet 1274980789.360 1 122.224.18.45 TCP_DENIED/403 1335 GET http://www.45520.com - NONE/- text/
html
echo: web-proxy,debug,packet 1274980789.372 0 64.56.76.181 TCP_DENIED/403 1322 CONNECT 222.15.69.195:25 - NONE/- text/h
tml
echo: web-proxy,debug,packet 1274980789.519 1 211.103.170.135 TCP_DENIED/403