Well, my access log fills up with lines like:
184.108.40.206 - - [21/Dec/2005:14:36:56 -0800] "GET
HTTP/1.1" 404 927
220.127.116.11 - - [21/Dec/2005:14:37:10 -0800] "GET
HTTP/1.0" 404 935
18.104.22.168 - - [21/Dec/2005:14:40:05 -0800] "GET
HTTP/1.0" 404 936
22.214.171.124 - - [21/Dec/2005:14:40:06 -0800] "GET
http://log.cpc.sohu.com:90/?pv.png HTTP/1.0" 200 589
126.96.36.199 - - [21/Dec/2005:14:40:27 -0800] "GET
http://www.ccet-server.com/cgi-bin/ip.cgi HTTP/1.0" 404 933
188.8.131.52 - - [21/Dec/2005:14:41:20 -0800] "GET
http://test.anonproxies.com/azenv.php?80 HTTP/1.0" 404 935
184.108.40.206 - - [21/Dec/2005:14:42:07 -0800] "GET
http://www.abcseek.info/cgi-bin/ip1.cgi HTTP/1.0" 404 933
220.127.116.11 - - [21/Dec/2005:14:42:29 -0800] "POST
http://18.104.22.168:80/checkp/env/env.php HTTP/1.0" 404 932
22.214.171.124 - - [21/Dec/2005:14:42:51 -0800] "GET
http://umsky.com/prx.php HTTP/1.0" 404 933
126.96.36.199 - - [21/Dec/2005:14:43:41 -0800] "GET
HTTP/1.1" 404 940
Tino Wildenhain wrote:
Ed Colmar schrieb:
I'm following up on this thread after lots of different configuration
attempts, reinstalling apache2 from source, more configuration attempts,
banging my head against the wall, and endless troubleshooting..
Unfortuantely I am still failing to configure this correctly.
Thankfully the people using my apache as a open proxy are so relentless
I only need to start apache for a few seconds to determine if the proxy
is still open or not...
So... I've made quite a bit of progress, but I am still at a loss to
understand what is going on here.... Possibly this is a question for
the apache forum, but I figured some of my fellow zope users might be
able to help, since all I'm using apache for is to rewrite for zope, and
I have cleaned up my virtual host directive to only use a single Rewrite
Rule (which works):
Still the proxy was open and under attack.
I'm wondering where you get the impression you have an open proxy?
Given your configuration, no access can go outside your zope.
Sure people will try it all the time - but your apache still
delivers just your zope content.
Just try it out yourself!
Zope maillist - Zope@zope.org
** No cross posts or HTML encoding! **
(Related lists -