Just because you are using s2, does not necessarily mean you are affected, all I get is a response :
HTTP/1.1 404 Content-Length: 0 Date: Thu, 16 Mar 2017 09:02:54 GMT Connection: close Looking at my logs this fishing is going on all the time. Thanks also Lukasz for the quick fix. Cheers Greg On 14 March 2017 at 18:17, Lukasz Lenart <lukaszlen...@apache.org> wrote: > 2017-03-14 15:57 GMT+01:00 Doug Erickson <erick...@part.net>: > > What is the proper server setup to prevent this? > > Upgrade to the latest Struts version ... and run server on a dedicated > account, block access to the world (sever should be only allowed to > connect to localhost) and few other things > > > Regards > -- > Ćukasz > + 48 606 323 122 http://www.lenart.org.pl/ > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org > For additional commands, e-mail: dev-h...@struts.apache.org > >