Re: [EMAIL PROTECTED] mod_proxy_connect security questions

2008-11-12 Thread matt . farey
y change, so if possible use hosts, and lock down your DNS outgoing to the IP of your ISP. Matt Sent from my BlackBerry® wireless device -Original Message- From: Jens <[EMAIL PROTECTED]> Date: Wed, 12 Nov 2008 23:46:25 To: Subject: [EMAIL PROTECTED] mod_prox

[EMAIL PROTECTED] mod_proxy_connect security questions

2008-11-12 Thread Jens
Hello, I set up mod_proxy, mod_proxy_http and mod_proxy_connect on my debian box (apache 2.2.3). After a couple of hours, I got the first spammer trying to abuse it - the access log showed ... CONNECT ...:25 HTTP/1.0 ... though nothing in the error logs. iftop tells me, however, that no t