tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Pid...@pidster.com>
Subject Re: many No Referrers in logs
Date Mon, 26 Jun 2006 15:17:05 GMT


Jon Wingfield wrote:
> Additionally, many client-side Security/Anti-Virus software packages
> automatically remove the referer header from requests.

Because it improves security. Apparently.


> Markus Schönhaber wrote:
>> Robert Kudyba wrote:
>>> We have our server.xml file set w/ the following entry:
>>> Valve className="org.apache.catalina.valves.AccessLogValve"
>>> directory="../logs" prefix="ws_access_log." suffix=".txt"
>>> pattern="combined"
>>>
>>> However, there are still many log entries showing no referrers. Some are
>>> from user spiders such as the following:
>> [...]
>>> So should we assume that if there is no referrer logged than the user
>>> was
>>> just using links within the site?
>>
>> No. IMO you should first of all assume that no-one guarantees that a
>> client is sending any referrer headers at all.
>> Most modern browsers will do so but it is more or less easy to change
>> their configure to not send them. And moreover, it is very easy to use
>> a proxy the removes referrer headers from all requests - idependent of
>> the client used or it's configuration.
>> Because of this you can't draw any safe and definite conclusion from
>> the absence of referrers.
>>
>> That said, David's answer stands: in propably most cases, no referrer
>> means the request was made from a bookmark or by typing the URL into
>> the address bar and not by clicking on a link on some page (which then
>> would be the referring page).
>>
>> Wether or not the referring page was "within the site" is of no
>> relevance.
>>
>> Regards
>>   mks
>>
>> ---------------------------------------------------------------------
>> To start a new topic, e-mail: users@tomcat.apache.org
>> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
>> For additional commands, e-mail: users-help@tomcat.apache.org
>>
> 
> 
> 
> ---------------------------------------------------------------------
> To start a new topic, e-mail: users@tomcat.apache.org
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
> 
> 
> 


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message