[Xitami] curious log entry (not Code Red)

[Ewen McNeill]

In message <3B72ED10.1AE600EE@ma.ultranet.com>, Dennis Ditto writes:
>Back in June I was receiving a number of requests (see log entry below),
>but not sure what was trying to be accomplished.  Has anyone else
>experienced this?  Anyone know what was being attempted?
>
><LOG DATE="05/Jun/2001:06:29:05 -0500" CLIENT="63.251.5.46" CLIENTIP="63.251.5.
>46" SERVERIP="192.168.1.2" REQUEST="GET http://www.yahoo.com/index.html HTTP/1.
>1" METHOD="GET" STATUS="404" RECEIVED="255" SENT="0" DURATION="" FILENAME="" US
>ERAGENT="Mozilla/4.5 [en] (Win95; I)" REFERER="(unknown)" USERNAME="-" SERVICE=
>"HTTP" VHOST="<any>"/>

Someone was trying to use your Xitami server as a web proxy.  Either
they'd inadvertantly thought that it was, or they were just
experimenting to see what was set up insecurely.  In either case Xitami
isn't a web proxy, so it just mutters darkly about these things and
moves on.

Ewen

-- 
Ewen McNeill, Technical Consultant, iMatix Corporation  www.imatix.com