Subject: Re: Apache log
From: James Zuelow (e5z8652@zuelow.net)
Date: Sat Jan 03 2004 - 12:19:58 AKST
On Sat, 3 Jan 2004 10:09:35 -0800 (PST)
Wesley Brown <webtacsat@yahoo.com> wrote:
> In my apache log I get some entries that seem to request another web page through my server. Like I am a proxy server.
>
> Here is the latest entry:
>
> 64.222.176.13 - - [02/Jan/2004:14:16:23 -0500] "GET http://www.yahoo.com/ HTTP/1.1" 200 4553
>
> I assume because of the 200 after the request that the attempt was successful. I have read a little about this problem but I don't understand how to fix it. Does anyone know what I am talking about? The fix seems simple I just don't know where to do it at.
>
Wesley,
Do you have address re-writing turned on, or custom error pages? These 200 messages are not necessarily indicative of an open proxy. All it means is that the server returned SOMETHING to the requestor. You could have an open relay, but lets hope not.
For example, try this:
$ telnet www.juneau-lug.org 80
Trying 24.237.22.218...
Connected to www.juneau-lug.org
Escape character is '^]'.
GET http://www.yahoo.com
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
This archive was generated by hypermail 2a23 : Sat Jan 03 2004 - 12:20:10 AKST