The scanning machines are looking for an open Socks proxy server that
they can use to send Spam.  As long as your apache config is
configured properly, you should be ok.  Normally you'll see those when
Apache is answering on 3128, 8000, 8080 and you'll see them less
frequently if you only answer on port 80, but, it does still happen.

LogLevel error

will turn off the warning message in your logs as they are warnings
that the connect string they are passing is improperly formed.

It does appear that the 200 code is being returned by your application
regardless of the request being sent, so, you're not an open proxy
server.  That 200 response will make bots believe they are getting
something successful.  You might change the rules slightly to
AllowConnect 80 443.  Also, the recommendation in that dictionary that
the proxy line be changed from Proxy * to Proxy http://www.domain.com/
which would keep invalid requests from hitting the backend.

-- 
You received this message because you are subscribed to the Google Groups 
"pylons-discuss" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/pylons-discuss?hl=en.

Reply via email to