can someone shed light as to what this means in the apache log... this is second time i see it 216.144.228.137 - - [09/Oct/2002:05:57:00 -0400] "CONNECT maila.microsoft.com:25 / HTTP/1.0" 200 20
R. R. wrote:
can someone shed light as to what this means in the apache log... this is second time i see it 216.144.228.137 - - [09/Oct/2002:05:57:00 -0400] "CONNECT maila.microsoft.com:25 / HTTP/1.0" 200 20
It means that person at that IP address is trying to use your web server as a proxy to send email. Most likely it is a spammer working on covering his tracks so that you will get blamed and not him. I'm not familar with the return codes from Apache, but it looks like the 200 means that they were successful. You can test your setup using the following commands. (Substitute your servers name for telnet www.example.com 80 Once connected type: CONNECT mx4.hotmail.com:25 HTTP/1.0 then hit enter twice. If you get disconnected then you are fine, if you get something similar to the following, then your web server is acting as an open proxy and should be secured. If it is unsecure, you'll have to ask how 220 mc4-f13.law16.hotmail.com Microsoft ESMTP MAIL Service, Version: 5.0.2195.5600 ready at Wed, 9 Oct 2002 10:44:08 -0700 Regards, Paul Varner
participants (2)
-
Paul Varner
-
R. R.