httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From ce ce <ce3062...@yahoo.com.sg>
Subject [users@httpd] Apache - Blocking CONNECT method
Date Wed, 26 Feb 2003 05:27:59 GMT
Hi, 

Recently I have detected from my access_log that there
are a lot of such traffic occured in the log:

x.x.x.x - - [26/Feb/2003:13:17:03 +0800] "CONNECT
y.y.y.y:25 HTTP/1.1" 400 383

Someone is trying to use my server to tunnel to
another smtp server.

As suggested in one of the mail in this list, I have 
try this in my Apache (Reverse Proxy):

<Directory proxy:*>
        <LimitExcept GET HEAD POST>
        Order deny,allow
        Deny from all
        </LimitExcept>
</Directory>

But this does not stop the CONNECT traffic. Anyone can
help?

Cheers,
Aries

__________________________________________________
Do You Yahoo!?
Promote your business from just $5 a month!
http://sg.biztools.yahoo.com

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message