[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: CONNECT in apache logs



On Mon, 2005-02-07 at 22:30 +1030, David Purton wrote:
> Hi folks,
> 
> Just looking for some peace of mind on getting lines like this in my
> apache logs:
> 
> 61-31-129-10.dynamic.tfn.net.tw - - [06/Feb/2005:10:50:08 +1030] "CONNECT ms81.hinet.net:25 HTTP/1.0" 200 1370 "-" "-"
> 
> I have the following line in /etc/apache/http.conf (ie commented out):
> 
> # LoadModule proxy_module /usr/lib/apache/1.3/libproxy.so
> 
> They give a 200 OK result, but as far as I can tell from my tests, my
> home page is delivered as a result of these requests, rather then
> anything dodgy.
> 
> Anything I should know about?
> 
> Can I configure anything so that these CONNECT requests give an error
> rather than 200?

They are just checking to see if you Webserver allows them to send SPAM
that actually DOES come from your machine. There are other modules you
need to worry about for this... Don't quite remember which modules...
but watch it, if it gets out that you work... it'll be used by several
thousand machines to send spam.

-- 
greg, greg@gregfolkert.net

The technology that is
Stronger, better, faster: Linux

Attachment: signature.asc
Description: This is a digitally signed message part


Reply to: