Package: mini-httpd Version: 1.19-3 Severity: normal
In addition to #491078, I found another issue that seems to show up (only?) in virtual host setup. There are logfile lines like these: 211.95.78.70 - - [20/Feb/2009:10:06:45 +0100] "POST /gollumhttp://www.ocnar.com/cgi-bin/textenv.pl HTTP/1.1" 400 - "" "" 211.95.78.70 - - [20/Feb/2009:10:06:47 +0100] "POST /gollumhttp://www.ocnar.com/cgi-bin/textenv.pl HTTP/1.1" 400 - "" "" 211.95.78.70 - - [20/Feb/2009:10:06:51 +0100] "UNKNOWN /gollum UNKNOWN" 400 - "" "" where "gollum" is the name of the machine which is NOT hosting www.ocnar.com or the like (I'm aware that this seems to be a breakin attempt). It appears that the information sent to the log is unnecessarily mangled before doing so, and of course I'd be interested in the original request. UNKNOWN is not very satisfying information... Would it be possible to log the original HTTP request in addition to what it's translated to afterwards? (perhaps #491078 and #516307 can be closed together with this one in a single go?) -- System Information: Debian Release: 4.0 APT prefers stable APT policy: (500, 'stable') Architecture: arm (armv5tel) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.18-4-ixp4xx Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Versions of packages mini-httpd depends on: ii libc6 2.3.6.ds1-13etch9 GNU C Library: Shared libraries ii libssl0.9.8 0.9.8c-4etch4 SSL shared libraries mini-httpd recommends no packages. -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
