Re: strange LOG_NONE requests

From: Christian Balzer <>
Date: Mon, 28 Oct 1996 00:51:46 +0100 (MET)

Duane Wessels wrote:
> writes:
>>>> With the new cachemgr.cgi that comes with 1.1beta, it's reminded
>>>> me to ask about the strange IP addresses that attempt to request
>>>> LOG_NONE. Some of them I can probably account for since my proxy is
>>>> 'announced' (but firmly acl'ed) as they are routable. Others, however,
>>>> include:
>>>Pardon my ignorance, but what am I looking at here, and why is this from
>>>both end-users (clients), and from peer proxies?
>>Yup, I'd like to know that as well (seeing such entries from
>>routable and non-routable or non-reachable address). Esp. since the
>>Squid here is also ACL'ed against accesses from outside the domain...
>LOG_NONE means that someone connected to the HTTP port, but did not
>make any sort of HTTP request. I.e. you get this if you make a connection
>and then disconnect it immediately.
OK, kinda makes sense with that name. ;-)

>I have no idea why the IP numbers are goofy. They're simply taken
>from the sockaddr return parameter of the accept() call.
It's really strange, esp. as I wonder if these are appearing in the
log, would they be able to actually access the proxy?



  // <CB> aka Christian Balzer, Tannenstr. 23c, D-64342 Seeheim, Germany
\X/ | Voice: +49 6257 83036, Fax/Data: +49 6257 83037
SWB  - The Software Brewery - | Team H, Germany HQ | Anime no Otaku
Received on Sun Oct 27 1996 - 15:52:14 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:33:23 MST