Re: [users@httpd] What Is This CONNECT Request In My Access Logs?

["herauthon" <herauthon@xxxxxxx>]

or a proxyscan by an irc-server?

----- Original Message -----

From: ed elliott

To: users@xxxxxxxxxxxxxxxx

Sent: Sunday, April 10, 2005 5:57 PM

Subject: Re: [users@httpd] What Is This CONNECT Request In My Access Logs?

CONNECT's are used when connecting to a proxy to do ssl tunneling:

 

http://www.w3.org/Protocols/rfc2616/rfc2616-sec9.html#sec9.9

 

If your server is a proxy server then it is probably expected.

 

 

"David P. Donahue" <ddonahue@xxxxxxxxxxx> wrote:

Every once in a while I get an entry in my access logs like this:

"CONNECT 216.135.96.176:6660 HTTP/1.0" 200 12717

Anyone know what this is? Is it a malicious attempt of some kind, or
just some innocent protocol some clients check for for some reason?
Anything I should be aware of? Thanks for any info you can offer.


Regards,
David P. Donahue
ddonahue@xxxxxxxxxxx

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
" from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx

Send instant messages to your online friends http://uk.messenger.yahoo.com