I think my server is being used a proxy of some sort, but I cannot tell how.. <VirtualHost *:80> ServerName XXXXXXXXXXXXXXXX CustomLog "|/usr/local/sbin/cronolog /srv/www/dhstracking/logs/%Y-%m-%d-XXXXXXXXXXXXXXX.log" combined DocumentRoot /srv/www/dhstracking/wwwroot HostnameLookups Off UseCanonicalName Off ServerSignature On DirectoryIndex login.do LoadModule rewrite_module /usr/lib64/apache2-prefork/mod_rewrite.so RewriteEngine On RewriteCond %{HTTPS} !=on RewriteLog "rewrite.log" RewriteRule /(.*) https://XXXXXXXXXXXX.com/$1 [R,L] <Location "/META-INF/"> AllowOverride None deny from all </Location> <Location "/WEB-INF/"> AllowOverride None deny from all </Location> </VirtualHost> I've posted my logs to an external URL. http://www.dfi-intl.com/~hidden/suspectlogs.txt. Essentially, my logs show hits for paths, URLs and files not even hosted on my box. Is my redirect too wide open? __________________________________________ Errol Uriel Neal Jr. Sr. Network Administrator DFI International, Inc. 1717 Pennsylvania Ave NW, Suite 1300 Washington, DC 20006 Tel (202)452-6955 Fax (202)452-6910 eneal@xxxxxxxxxxxx www.dfi-intl.com --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx