Hey Tino

Well, my access log fills up with lines like: - - [21/Dec/2005:14:36:56 -0800] "GET http://media.fastclick.net/w/get.media?sid=19765&m=3&tp=7&d=s&c=1 HTTP/1.1" 404 927 - - [21/Dec/2005:14:37:10 -0800] "GET http://www.searchvill.com/index.php?uid=1077&REQ=Poker%20Betting HTTP/1.0" 404 935 - - [21/Dec/2005:14:40:05 -0800] "GET http://adsence.sogou.com/index.html?pid=info-xa163&ww=120&dc=3&dir=0&num=6&color=1&charset=gb HTTP/1.0" 404 936 - - [21/Dec/2005:14:40:06 -0800] "GET http://log.cpc.sohu.com:90/?pv.png HTTP/1.0" 200 589 - - [21/Dec/2005:14:40:27 -0800] "GET http://www.ccet-server.com/cgi-bin/ip.cgi HTTP/1.0" 404 933 - - [21/Dec/2005:14:41:20 -0800] "GET http://test.anonproxies.com/azenv.php?80 HTTP/1.0" 404 935 - - [21/Dec/2005:14:42:07 -0800] "GET http://www.abcseek.info/cgi-bin/ip1.cgi HTTP/1.0" 404 933 - - [21/Dec/2005:14:42:29 -0800] "POST HTTP/1.0" 404 932 - - [21/Dec/2005:14:42:51 -0800] "GET http://umsky.com/prx.php HTTP/1.0" 404 933 - - [21/Dec/2005:14:43:41 -0800] "GET http://clickingagent.com/proxycheck.php?ip= HTTP/1.1" 404 940


Tino Wildenhain wrote:

Ed Colmar schrieb:
Hey All..

I'm following up on this thread after lots of different configuration
attempts, reinstalling apache2 from source, more configuration attempts,
banging my head against the wall, and endless troubleshooting.. Unfortuantely I am still failing to configure this correctly.

Thankfully the people using my apache as a open proxy are so relentless
I only need to start apache for a few seconds to determine if the proxy
is still open or not...

So...  I've made quite a bit of progress, but I am still at a loss to
understand what is going on here....   Possibly this is a question for
the apache forum, but I figured some of my fellow zope users might be
able to help, since all I'm using apache for is to rewrite for zope, and
log access.

I have cleaned up my virtual host directive to only use a single Rewrite
Rule (which works):
RewriteRule ^/(.*)$1

Still the proxy was open and under attack.

I'm wondering where you get the impression you have an open proxy?
Given your configuration, no access can go outside your zope.

Sure people will try it all the time - but your apache still
delivers just your zope content.

Just try it out yourself!

Zope maillist  -  Zope@zope.org
**   No cross posts or HTML encoding!  **
(Related lists - http://mail.zope.org/mailman/listinfo/zope-announce
http://mail.zope.org/mailman/listinfo/zope-dev )

Reply via email to