Posted 26 February 2013 - 09:13 PM
Hey so I wasn't really sure where to put this, but I think this is a reasonable spot. So here we go.
So today my coworker noticed there is a random proxy in our domain. We run a sonic wall along with roughly 6-8servers, some of which being clients. Now my coworker, who is a network technician, ran a program called Nmap, I don't really know what it does or tests so I apologize in advanced. The nmap told us it was a linux box, we dont have any linux boxes, server nor pc. The nmap test had also told us the proxy is being run through Squid. The proxy has been running for 26days, roughly. We do also occasionally get spam mail.
Does anyone have any ideas what this could be? We're almost positive its either a virus or an unwanted visitor.