httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From ce ce <>
Subject [users@httpd] Apache - Blocking CONNECT method
Date Wed, 26 Feb 2003 05:27:59 GMT

Recently I have detected from my access_log that there
are a lot of such traffic occured in the log:

x.x.x.x - - [26/Feb/2003:13:17:03 +0800] "CONNECT
y.y.y.y:25 HTTP/1.1" 400 383

Someone is trying to use my server to tunnel to
another smtp server.

As suggested in one of the mail in this list, I have 
try this in my Apache (Reverse Proxy):

<Directory proxy:*>
        <LimitExcept GET HEAD POST>
        Order deny,allow
        Deny from all

But this does not stop the CONNECT traffic. Anyone can


Do You Yahoo!?
Promote your business from just $5 a month!

The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:> for more info.
To unsubscribe, e-mail:
   "   from the digest:
For additional commands, e-mail:

View raw message