Koozali.org: home of the SME Server
Contribs.org Forums => Koozali SME Server 10.x => Topic started by: robf355 on June 03, 2022, 10:56:56 AM
-
Hi
I've started getting these messages in the logwatch report, I notice it says 'attempts', so it may be nothing to worry about.
Connection attempts using mod_proxy:
111.224.248.98 -> www.voanews.com:443: 2 Time(s)
111.85.200.160 -> cn.bing.com:443: 2 Time(s)
....
45.81.232.249 -> 45.85.218.132:4444: 2 Time(s)
In the http access.log the attempt is listed, but there is no listing in error.log
kjctechnik.com 111.224.248.98 - - [02/Jun/2022:00:01:44 +0100] "CONNECT www.voanews.com:443 HTTP/1.1" 200 161 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
Is this anything to worry about, HTTP proxy status in server manager is set to disabled
Regards
Rob
-
mod proxy is a module of apache
the proxy option in the manager is for squid, the webproxy for your lan computer.
read this first result googling the term you pasted
https://serverfault.com/questions/286999/logwatch-connection-attempts-using-mod-proxy
and to check
https://serverfault.com/questions/589238/how-can-i-test-if-my-apache-server-is-an-open-proxy
he only answer you will get is the server redirecting you to https when you connect to port 80.
-
Thanks for the reply, I'm going away and was just concerned, the suggestion about testing using telnet just rerouted to my website, so that seems ok.
Regards
Rob