Ravens PHP Scripts: Forums
 

 

View next topic
View previous topic
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> Security - PHP Nuke
Author Message
oprime2001
Worker
Worker


Joined: Jun 04, 2004
Posts: 119
Location: Chicago IL USA

PostPosted: Thu Oct 07, 2004 5:30 pm Reply with quote

From Only registered users can see links on this board! Get registered or login!
Quote:
9.9 CONNECT

This specification reserves the method name CONNECT for use with a proxy that can dynamically switch to being a tunnel (e.g. SSL tunneling [44]).


Is there a valid purpose for using a CONNECT request method? I'm being a bit paranoid because of these lines from my access logs:
Code:
67.234.*.* - - [07/Oct/2004:16:47:49 -0400] "CONNECT mx0.domainsite.com:25 HTTP/1.0" 200 231 - "-" "-" "-"

67.234.*.* - - [07/Oct/2004:16:47:50 -0400] "POST http://67.234.*.*:25/ HTTP/1.1" 200 240 67.234.*.* "-" "-" "-"

I've preemptively blocked the CONNECT request method within Sentinel. Am I being too paranoid, and is the CONNECT request method and/or the above access log lines innocent?

Thanks.
 
View user's profile Send private message
sixonetonoffun
Spouse Contemplates Divorce


Joined: Jan 02, 2003
Posts: 2496

PostPosted: Thu Oct 07, 2004 7:12 pm Reply with quote

port 25 something being run through your email server?
MyDoom virus maybe?

_________________
[b][size=5]openSUSE 11.4-x86 | Linux 2.6.37.1-1.2desktop i686 | KDE: 4.6.41>=4.7 | XFCE 4.8 | AMD Athlon(tm) XP 3000+ | MSI K7N2 Delta-L | 3GB Black Diamond DDR
| GeForce 6200@433Mhz 512MB | Xorg 1.9.3 | NVIDIA 270.30[/size:2b8 
View user's profile Send private message
Display posts from previous:       
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> Security - PHP Nuke

View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001-2007 phpBB Group
All times are GMT - 6 Hours
 
Forums ©