Patrick Shanahan wrote:

* Cristian Rodríguez [01-17-14 19:12]:

...

El 17/01/14 20:09, Patrick Shanahan escribió:

...

How do I stop my apache2 logs from being full of:

192.168.1.1 - - [17/Jan/2014:17:15:59 -0500] "GET /wpad.dat HTTP/1.1" 200 796 "-" "Windows-Update-Agent/7.9.9600.16422 Client-Protocol/1.20"

what's your question ? See http://en.wikipedia.org/wiki/Web_Proxy_Autodiscovery_Protocol for details on "wpad.dat"

My apache2 logs are filling with *many* wpad.dat entries. How can I stop them or filter them out?

Something like this might help: SetEnvIf Request_URI wpad\.dat dontlog=1 CustomLog file format env!=dontlog -- Per Jessen, Zürich (3.3°C) http://www.hostsuisse.com/ - dedicated server rental in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

* Patrick Shanahan [01-18-14 09:10]:

* Per Jessen [01-18-14 03:58]:

...

Patrick Shanahan wrote:

...

* Cristian Rodríguez [01-17-14 19:12]: [...]

...

what's your question ? See http://en.wikipedia.org/wiki/Web_Proxy_Autodiscovery_Protocol for details on "wpad.dat"

My apache2 logs are filling with *many* wpad.dat entries. How can I stop them or filter them out?

Something like this might help:

SetEnvIf Request_URI wpad\.dat dontlog=1 CustomLog file format env!=dontlog

in: /etc/apache2/conf.d/awstats.conf above: CustomLog /var/log/apache2/awstats.log combined

doesn't allow apache2 to restart, but... as one line: SetEnvIf Request_URI wpad\.dat dontlog=1 CustomLog file format env!=dontlog

appears to be working. Will advise shortly.

:^( Apache2 works but it does not stop the wpad.dat log entries :^(

ps: CustomLog "|/usr/bin/grep -v wpad.dat >> /var/log/apache2/awstats.log" combined stops the wpad.dat log entries but crashes my server :^( perhaps an awk or perl script would work but I don't possess the knowledge. If someone can provide, I will test.

800 lines, wpad.dat, in /var/log/apache2/awstats.log today, <10 hrs

tks, -- (paka)Patrick Shanahan Plainfield, Indiana, USA @ptilopteri http://en.opensuse.org openSUSE Community Member facebook/ptilopteri http://wahoo.no-ip.org Photo Album: http://wahoo.no-ip.org/gallery2 Registered Linux User #207535 @ http://linuxcounter.net -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

Cristian Rodríguez wrote:

El 18/01/14 11:17, Patrick Shanahan escribió:

...

CustomLog "|/usr/bin/grep -v wpad.dat >> /var/log/apache2/awstats.log" combined stops the wpad.dat log entries but crashes my server :^(

that's crazy.. that is going to be executed once per request..no wonder it does not work.

No, it's not that bad. Apache will try to attach that as a daemon which reads from stdin and writes to stdout. -- Per Jessen, Zürich (3.2°C) http://www.hostsuisse.com/ - dedicated server rental in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

* Per Jessen [01-18-14 11:27]:

Patrick Shanahan wrote:

...

* Per Jessen [01-18-14 03:58]:

...

Patrick Shanahan wrote:

...

* Cristian Rodríguez [01-17-14 19:12]: [...]

...

what's your question ? See http://en.wikipedia.org/wiki/Web_Proxy_Autodiscovery_Protocol for details on "wpad.dat"

My apache2 logs are filling with *many* wpad.dat entries. How can I stop them or filter them out?

Something like this might help:

SetEnvIf Request_URI wpad\.dat dontlog=1 CustomLog file format env!=dontlog

in: /etc/apache2/conf.d/awstats.conf above: CustomLog /var/log/apache2/awstats.log combined

doesn't allow apache2 to restart, but... as one line: SetEnvIf Request_URI wpad\.dat dontlog=1 CustomLog file format env!=dontlog

appears to be working. Will advise shortly.

You really need two lines:

SetEnvIf Request_URI wpad\.dat dontlog=1 CustomLog file format env=!dontlog ^^^^^^^^^^^

Don't forget to amend 'file' and 'format' according to your needs. Also note the different positioning of the '!'.

Then I need to replace the present line: CustomLog /var/log/apache2/awstats.log combined with: SetEnvIf Request_URI wpad\.dat dontlog=1 CustomLog /var/log/apache2/awstats.log combined env!=dontlog away atm, will report tks, -- (paka)Patrick Shanahan Plainfield, Indiana, USA @ptilopteri http://en.opensuse.org openSUSE Community Member facebook/ptilopteri http://wahoo.no-ip.org Photo Album: http://wahoo.no-ip.org/gallery2 Registered Linux User #207535 @ http://linuxcounter.net -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

* Patrick Shanahan [01-18-14 13:35]:

* Patrick Shanahan [01-18-14 12:58]:

...

* Per Jessen [01-18-14 11:27]: [...]

...

You really need two lines:

SetEnvIf Request_URI wpad\.dat dontlog=1 CustomLog file format env=!dontlog ^^^^^^^^^^^

Don't forget to amend 'file' and 'format' according to your needs. Also note the different positioning of the '!'.

Then I need to replace the present line: CustomLog /var/log/apache2/awstats.log combined with: SetEnvIf Request_URI wpad\.dat dontlog=1 CustomLog /var/log/apache2/awstats.log combined env!=dontlog

away atm, will report

apache2 start complaines about format and stops, removing "!" from "env!=dontlog" satisfies the "format" error but doesn't stop the wpad.dat entries :^(

and I misplaced the "!", corrected and testing tks, -- (paka)Patrick Shanahan Plainfield, Indiana, USA @ptilopteri http://en.opensuse.org openSUSE Community Member facebook/ptilopteri http://wahoo.no-ip.org Photo Album: http://wahoo.no-ip.org/gallery2 Registered Linux User #207535 @ http://linuxcounter.net -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

* Patrick Shanahan [01-18-14 17:41]:

* Patrick Shanahan [01-18-14 13:38]:

...

* Patrick Shanahan [01-18-14 13:35]:

...

* Patrick Shanahan [01-18-14 12:58]:

...

* Per Jessen [01-18-14 11:27]: [...]

...

You really need two lines:

SetEnvIf Request_URI wpad\.dat dontlog=1 CustomLog file format env=!dontlog ^^^^^^^^^^^

Don't forget to amend 'file' and 'format' according to your needs. Also note the different positioning of the '!'.

Then I need to replace the present line: CustomLog /var/log/apache2/awstats.log combined with: SetEnvIf Request_URI wpad\.dat dontlog=1 CustomLog /var/log/apache2/awstats.log combined env!=dontlog

away atm, will report

apache2 start complaines about format and stops, removing "!" from "env!=dontlog" satisfies the "format" error but doesn't stop the wpad.dat entries :^(

and I misplaced the "!", corrected and testing

Hooray, this does work, but somewhat oddly...

/var/log/apache2/awstats.log still displays wpad.dat entries while access_log does not. So I have changed awstats.conf to use access_log and condition is corrected to my satisfaction.

but I am having difficulty stopping apache2 from logging to only access_log and not awstats.log ??

Spoke too soon, excluding "wpad.dat" log entries did/does not work! but the conf file does not abort apache2. ps: where are apache log files defined besides: /etc/apache2/sysconfig.d/global.conf /etc/apache2/conf.d/awstats.conf /etc/sysconfig/apache2 /etc/awstats/awstats.web.conf -- (paka)Patrick Shanahan Plainfield, Indiana, USA @ptilopteri http://en.opensuse.org openSUSE Community Member facebook/ptilopteri http://wahoo.no-ip.org Photo Album: http://wahoo.no-ip.org/gallery2 Registered Linux User #207535 @ http://linuxcounter.net -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

* Per Jessen [01-19-14 13:11]:

Patrick Shanahan wrote: [...]

...

Spoke too soon, excluding "wpad.dat" log entries did/does not work!

but the conf file does not abort apache2.

ps: where are apache log files defined besides: /etc/apache2/sysconfig.d/global.conf /etc/apache2/conf.d/awstats.conf /etc/sysconfig/apache2 /etc/awstats/awstats.web.conf

Put the setenvif statement in a global config, e.g. httpd.conf. Then add the env=!dontlog to every customlog statement where you don't want wpad.dat.

added senenvif statement to new file /etc/apache2/httpd.conf.local and include statement in etc/sysconfig/apache2 for httpd.conf.local. put env=!dontlog into /etc/apache2/conf.d/awstats.conf and /etc/awstats/awstats.web.conf /etc/apache2/sysconfig.d/global.conf is generated when apache2 starts or restarts.

In the 'setenvif', maybe remove the backslash or add a 2nd one. Without the backslash, the regex becomes a little 'wider', but that can be fine-tuned later. doesn't appear necessary (atm).

this appears to stop wpad.dat entries into access_og which is not what I have configured. Nowhere do I have access_log configured but it is still being generated and awstats.log is full of wpad.dat entries :^( Where would access_log be defined besides /etc/apache2/conf.d/awstats.conf /and etc/sysconfig/apache2? (thinking about disabling awstats.log and pointing awstats.conf to access_log) tks, -- (paka)Patrick Shanahan Plainfield, Indiana, USA @ptilopteri http://en.opensuse.org openSUSE Community Member facebook/ptilopteri http://wahoo.no-ip.org Photo Album: http://wahoo.no-ip.org/gallery2 Registered Linux User #207535 @ http://linuxcounter.net -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

* Per Jessen [01-20-14 02:48]:

Patrick Shanahan wrote: [...]

...

this appears to stop wpad.dat entries into access_og which is not what I have configured. Nowhere do I have access_log configured but it is still being generated and awstats.log is full of wpad.dat entries :^(

Where would access_log be defined besides /etc/apache2/conf.d/awstats.conf /and etc/sysconfig/apache2?

Quite often in /etc/apache2/vhosts.d/*.conf if you have virtual hosts. Otherwise grep for it.

grep -rv ^# /etc/apache2/* /etc/sysconfig/* |grep /var/log/apache2/access_log has no output and both awstats.log and access_log are being generated. access_log is getting no "wapd.dat" entries. Configured awstats.log has *many* "wpad.dat" entries: 192.168.1.1 - - [20/Jan/2014:08:11:08 -0500] "GET /wpad.dat HTTP/1.1" 200 86 "-" "Windows-Update-Agent/7.9.9600.16422 Client-Protocol/1$ 192.168.1.1 - - [20/Jan/2014:08:11:08 -0500] "GET /wpad.dat HTTP/1.1" 200 86 "-" "Windows-Update-Agent/7.9.9600.16422 Client-Protocol/1$ 192.168.1.1 - - [20/Jan/2014:08:11:38 -0500] "GET /wpad.dat HTTP/1.1" 200 86 "-" "Microsoft NCSI" 192.168.1.1 - - [20/Jan/2014:08:13:25 -0500] "GET /wpad.dat HTTP/1.1" 200 86 "-" "-" 192.168.1.1 - - [20/Jan/2014:08:17:44 -0500] "GET /wpad.dat HTTP/1.1" 200 86 "-" "Mozilla/5.0 (compatible; IE 11.0; Win32; Trident/7.0)" 192.168.1.1 - - [20/Jan/2014:08:17:45 -0500] "GET /wpad.dat HTTP/1.1" 200 86 "-" "Mozilla/5.0 (compatible; IE 11.0; Win32; Trident/7.0)" 192.168.1.1 - - [20/Jan/2014:08:18:06 -0500] "GET /wpad.dat HTTP/1.1" 200 86 "-" "Windows-Update-Agent/7.9.9600.16422 Client-Protocol/1$ setting both win boxes hosts to: 0.0.0.0 wpad stops all wpad.dat entries and no error entries are generated tks, -- (paka)Patrick Shanahan Plainfield, Indiana, USA @ptilopteri http://en.opensuse.org openSUSE Community Member facebook/ptilopteri http://wahoo.no-ip.org Photo Album: http://wahoo.no-ip.org/gallery2 Registered Linux User #207535 @ http://linuxcounter.net -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

On 01/18/2014 11:56 AM, Patrick Shanahan wrote:

CustomLog /var/log/apache2/awstats.log combined env!=dontlog

didn't Per say CustomLog /var/log/apache2/awstats.log combined env=!dontlog ^^ -- David C. Rankin, J.D.,P.E. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

Patrick Shanahan wrote:

* David C. Rankin [01-18-14 20:42]:

...

On 01/18/2014 11:56 AM, Patrick Shanahan wrote:

...

CustomLog /var/log/apache2/awstats.log combined env!=dontlog

didn't Per say

CustomLog /var/log/apache2/awstats.log combined env=!dontlog

yes, he did and I corrected.

But.... It fails :^(

Hmm, what does "journalctl -n" say? I have not tested the setup I proposed, so maybe a typo somewhere? -- Per Jessen, Zürich (0.0°C) http://www.hostsuisse.com/ - dedicated server rental in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

Patrick Shanahan wrote:

* Per Jessen [01-19-14 13:08]:

...

Patrick Shanahan wrote:

...

* David C. Rankin [01-18-14 20:42]:

...

On 01/18/2014 11:56 AM, Patrick Shanahan wrote:

...

CustomLog /var/log/apache2/awstats.log combined env!=dontlog

didn't Per say

CustomLog /var/log/apache2/awstats.log combined env=!dontlog

yes, he did and I corrected.

But.... It fails :^(

Hmm, what does "journalctl -n" say? I have not tested the setup I proposed, so maybe a typo somewhere?

not enough info :^)

fails to exclude wpad.dat entries in log, doesn't cause web server to fail.

Okay, then it has to be the regex in setenvif. -- Per Jessen, Zürich (0.0°C) http://www.hostsuisse.com/ - dedicated server rental in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

* Patrick Shanahan [01-19-14 16:23]: ps: from the win machines, ping wpad resolves to my wpad.<my-ip> which is undoubtedly why I see wpad.dat in my web server logs. -- (paka)Patrick Shanahan Plainfield, Indiana, USA @ptilopteri http://en.opensuse.org openSUSE Community Member facebook/ptilopteri http://wahoo.no-ip.org Photo Album: http://wahoo.no-ip.org/gallery2 Registered Linux User #207535 @ http://linuxcounter.net -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

* Bernhard Voelker [01-19-14 18:41]:

On 01/19/2014 10:42 PM, Patrick Shanahan wrote:

...

* Patrick Shanahan [01-19-14 16:23]:

ps: from the win machines, ping wpad resolves to my wpad.<my-ip>

which is undoubtedly why I see wpad.dat in my web server logs.

This is really strange. Anyway, you can tell your browser to not use the "wpad" mechanism: e.g. in the connection settings in Firefox, choose "No proxy".

I have had this set for a long time :^)

.. but it would be interesting why these hosts get your web server's IP when resolving "wpad". Do you have an unusual DNS server (or cache)? If "nslookup wpad" returns your IP, then it's the DNS. Else it's an issue on the Win7 & Win8 box. I'd guess the former.

from the openSUSE boxes: wahoo:~/mail > nslookup wpad Server: 8.8.8.8 Address: 8.8.8.8#53 Non-authoritative answer: *** Can't find wpad: No answer from the win boxes: $ nslookup wpad Non-authoritative answer: Server: google-public-dns-a.google.com Address: 8.8.8.8 Name: wpad.wahoo.no-ip.org Address: 50.90.199.127

BTW: setting "8.8.8.8 wpad" in the hosts files is probably not wanted (by google, the owner of that IP). The choice with "127.0.0.1 wpad" looks better to me (I'd probably put the real hostname first after the IP). ... but it's still a workaround for the unusual resolving of "wpad" to your IP.

But setting to "127.0.0.1 wpad" provides the same wpad.dat entries in apache2 access_log or in apache2 error.log :( perhaps I should set it to some site that does not resolve ?? or perhaps, example.com ?? perhaps one of the advertising sites :^) -- (paka)Patrick Shanahan Plainfield, Indiana, USA @ptilopteri http://en.opensuse.org openSUSE Community Member facebook/ptilopteri http://wahoo.no-ip.org Photo Album: http://wahoo.no-ip.org/gallery2 Registered Linux User #207535 @ http://linuxcounter.net -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

On 01/20/2014 01:24 AM, Patrick Shanahan wrote:

* Bernhard Voelker [01-19-14 18:41]:

...

If "nslookup wpad" returns your IP, then it's the DNS. Else it's an issue on the Win7 & Win8 box. I'd guess the former.

from the openSUSE boxes:

wahoo:~/mail > nslookup wpad Server: 8.8.8.8 Address: 8.8.8.8#53

Non-authoritative answer: *** Can't find wpad: No answer

from the win boxes:

$ nslookup wpad Non-authoritative answer: Server: google-public-dns-a.google.com Address: 8.8.8.8

Name: wpad.wahoo.no-ip.org Address: 50.90.199.127

Huh? I don't understand this: both openSUSE and the windows boxes are using 8.8.8.8 as DNS server, but asking from Win returns your own public IP address?!? It should've given you the "non-existent domain" error. I've never seen this. Have a nice day, Berny -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

On 20 January 2014 00:24, Patrick Shanahan wrote:

* Bernhard Voelker [01-19-14 18:41]:

...

On 01/19/2014 10:42 PM, Patrick Shanahan wrote:

...

* Patrick Shanahan [01-19-14 16:23]:

ps: from the win machines, ping wpad resolves to my wpad.<my-ip>

which is undoubtedly why I see wpad.dat in my web server logs.

This is really strange. Anyway, you can tell your browser to not use the "wpad" mechanism: e.g. in the connection settings in Firefox, choose "No proxy".

I have had this set for a long time :^)

...

.. but it would be interesting why these hosts get your web server's IP when resolving "wpad". Do you have an unusual DNS server (or cache)? If "nslookup wpad" returns your IP, then it's the DNS. Else it's an issue on the Win7 & Win8 box. I'd guess the former.

from the openSUSE boxes:

wahoo:~/mail > nslookup wpad Server: 8.8.8.8 Address: 8.8.8.8#53

Non-authoritative answer: *** Can't find wpad: No answer

from the win boxes:

$ nslookup wpad Non-authoritative answer: Server: google-public-dns-a.google.com Address: 8.8.8.8

Name: wpad.wahoo.no-ip.org Address: 50.90.199.127

On your openSUSE machine you do not have 'domain wahoo.no-ip.org' or 'search wahoo.no-ip.org' in /etc/resolv.conf, so a DNS lookup for 'wpad' simply returns NXDOMAIN. Your Windows machine has the functional equivalent of 'domain wahoo.no-ip.org', probably configured by your DHCP server, unless you've configured the network interface manually. It therefore appends 'wahoo.no-ip.org' to 'wpad' to get a fully qualified domain name, and looks up 'wpad.wahoo.no-ip.org'. You have a wildcard domain record set up such that 'practicallyanythinggoeshere.wahoo.no-ip.org' resolves to 50.90.199.127. In short, everything is behaving correctly and as expected. Your options are: 1) Add an entry to Windows' hosts file, as you've discovered. 2) Remove the wildcard DNS record and replace it with explicit records for those names that you actually want to resolve. 3) Configure Windows not to append the primary DNS suffix when looking up an unqualified name. I'm not entirely certain it's possible to do this, although you could probably set it to something intentionally invalid so that all unqualified lookups fail. 3a) (In the same vein as setting it to something intentionally invalid) Configure your DHCP server not to inform the client what its DNS suffix should be. Probably not what you want. 4) Take a look here: http://social.technet.microsoft.com/Forums/windowsserver/en-US/a97604d6-b6d1... - in particular I'd suggest trying one-by-one the steps listed by Arthur_Li in that thread. Personally I'd probably go with option 2, as wildcard DNS records can cause any number of surprises like this. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

On 21 January 2014 22:18, Patrick Shanahan wrote:

* Aneurin Price [01-21-14 15:02]: [...]

...

On your openSUSE machine you do not have 'domain wahoo.no-ip.org' or 'search wahoo.no-ip.org' in /etc/resolv.conf, so a DNS lookup for 'wpad' simply returns NXDOMAIN.

I do have "search wahoo.no-ip.org" but not "domain wahoo.no-ip.org" in /etc/resolv.conf.

...

Your Windows machine has the functional equivalent of 'domain wahoo.no-ip.org', probably configured by your DHCP server, unless you've configured the network interface manually. It therefore appends 'wahoo.no-ip.org' to 'wpad' to get a fully qualified domain name, and looks up 'wpad.wahoo.no-ip.org'. You have a wildcard domain record set up such that 'practicallyanythinggoeshere.wahoo.no-ip.org' resolves to 50.90.199.127.

In short, everything is behaving correctly and as expected.

Your options are: 1) Add an entry to Windows' hosts file, as you've discovered. 2) Remove the wildcard DNS record and replace it with explicit records for those names that you actually want to resolve.

out of my tree here, how to remove wildcard DNS record. I use dhcp to assign hostname but have not configured it more (to my knowledge).

I've not used no-ip, but their help pages suggest that it's an option there: http://www.noip.com/blog/2012/01/25/confused-about-configuring-your-no-ip-ho... How are you updating your IP address at no-ip.org? Presumably it's using something like ddclient on your router? This might also need a configuration change if it is specifically submitting a wildcard hostname, but it's probably not so changing the hostname settings via their web interface should do the trick. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

On 01/21/2014 08:59 PM, Aneurin Price wrote:

On your openSUSE machine you do not have 'domain wahoo.no-ip.org' or 'search wahoo.no-ip.org' in /etc/resolv.conf, so a DNS lookup for 'wpad' simply returns NXDOMAIN.

Your Windows machine has the functional equivalent of 'domain wahoo.no-ip.org', probably configured by your DHCP server, unless you've configured the network interface manually. It therefore appends 'wahoo.no-ip.org' to 'wpad' to get a fully qualified domain name, and looks up 'wpad.wahoo.no-ip.org'. You have a wildcard domain record set up such that 'practicallyanythinggoeshere.wahoo.no-ip.org' resolves to 50.90.199.127.

In short, everything is behaving correctly and as expected.

Thanks for the analysis and sharing it.

Your options are: 1) Add an entry to Windows' hosts file, as you've discovered. 2) Remove the wildcard DNS record and replace it with explicit records for those names that you actually want to resolve. 3) Configure Windows not to append the primary DNS suffix when looking up an unqualified name. I'm not entirely certain it's possible to do this, although you could probably set it to something intentionally invalid so that all unqualified lookups fail. 3a) (In the same vein as setting it to something intentionally invalid) Configure your DHCP server not to inform the client what its DNS suffix should be. Probably not what you want. 4) Take a look here: http://social.technet.microsoft.com/Forums/windowsserver/en-US/a97604d6-b6d1... - in particular I'd suggest trying one-by-one the steps listed by Arthur_Li in that thread.

Personally I'd probably go with option 2, as wildcard DNS records can cause any number of surprises like this.

I'm not sure one can change the behavior at no-ip.org. Therefore, I'd go with option #3, i.e. removing wahoo.no-ip.org as search domain. Most probably Patrick wants "wahoo" not to be a sub-domain because all the traffic goes to his router anyway, which in turn will have to have port-forwarding entries for certain services like http, ssh, etc. to internal hosts. Have a nice day, Berny -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

* Carlos E. R. [01-19-14 16:49]:

On 2014-01-19 22:22, Patrick Shanahan wrote: [...]

...

On the two "challenged" boxes on my local net, win7 & win8, I have edited host to: 8.8.8.8 wpad ##direct wpad.dat to an outside source

I don't think that's the route, either. Possibly, your windows computer would get an wpad.dat from outside, and it is anybody guess out what that would contain.

(I pointed firefox to "8.8.8.8/wpad.dat". It times out. Bad).

If I understand correctly from the wikipedia article, the browsers can use that file to autoconfigure themselves. So possibly you have to instead configure those browsers to NOT autoconfigure.

I have set firefox as default browser on both win machines and disabled auto-proxy on both.

Another route could be to create that file on your apache server. Maybe your windows machines fail to find it and try again many, many times. So just supply it, maybe once is enough. You have to find out what it should contain, of course.

I have placed a wpad.dat file on /srv/www/htdocs/wpad.dat; [dirtycode] function FindProxyForURL(url, host) { return “DIRECT”; } [/dirtycode] And the apache2 logs show positive connection, >1000 per day :^( And I do see the win machines firefox timing out on 8.8.8.8/wpad{.dat} ??? -- (paka)Patrick Shanahan Plainfield, Indiana, USA @ptilopteri http://en.opensuse.org openSUSE Community Member facebook/ptilopteri http://wahoo.no-ip.org Photo Album: http://wahoo.no-ip.org/gallery2 Registered Linux User #207535 @ http://linuxcounter.net -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

Patrick Shanahan wrote:

...

...

192.168.1.1 - - [17/Jan/2014:17:15:59 -0500] "GET /wpad.dat HTTP/1.1" 200 796 "-" "Windows-Update-Agent/7.9.9600.16422 Client-Protocol/1.20" the local net and their firefox configs have proxy set to manual and the operating systems the wpad lookup service is disabled.

Still I get 100's of entries, wpad.dat, per hour :^(

=== It's not firefox, but windows-update that is doing the probing. Do you have your system's network proxy settings on the windows clients set to 'manual'? (Might also set the settings in IE to manual to be safe). For the prior: In the command prompt (in 64-bit mode -- i.e. a 32-bit cygwin prompt won't work, but a 64-bit cygwin prompt is fine), else use "cmd". then input: netsh winhttp show proxy --- that will tell you if you have a manual proxy setup: law.Bliss> netsh netsh>winhttp netsh winhttp>show proxy Current WinHTTP proxy settings: Proxy Server(s) : web-proxy:8118 Bypass List : <local>;192.168.3.*;192.168.4.*;*.sc.tlinx.org;*.hs.tlinx.org --- typing set proxy will show help on setting one: netsh winhttp>set proxy The syntax supplied for this command is not valid. Check help for the correct syntax. Usage: set proxy [proxy-server=]<server name> [bypass-list=]<hosts list> Parameters: Tag Value proxy-server - proxy server for use for http and/or https protocol bypass-list - a list of sites that should be visited bypassing the proxy (use "<local>" to bypass all short name hosts) Examples: set proxy myproxy set proxy myproxy:80 "<local>;bar" set proxy proxy-server="http=myproxy;https=sproxy:88" bypass-list="*.foo.com" --- By default, win-clients try to use DHCP which tries to auto-discover proxy settings. Note my winhttp proxy settings above are for a fixed, internal proxy (squid). -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

Patrick Shanahan wrote:

yes, I have "no proxy" set on the windows machines

...

Do you have your system's network proxy settings on the windows clients set to 'manual'?

Direct access (no proxy server).

...

(Might also set the settings in IE to manual to be safe).

also :^)

I have set in hosts on both machines: 0.0.0.0 wpdat which stops the log entries. When I remove the setting from hosts, I get the log entries again.

windoz bewilders me, it's soooo logical :^(

Well windows-update doesn't use firefox or user-IE network connect settings -- it uses those system values you see in netsh. So if those machines need windows update to work, then you need to set the proxy in the netsh tool (may be other ways to set it, but dunno off hand). If you don't need windows update to work -- then turn off or disable windows update and that should also stop the probing. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org