From owner-freebsd-isp Wed Feb 2 22:53:33 2000 Delivered-To: freebsd-isp@freebsd.org Received: from eastgate.cyberway.com.sg (eastgate.cyberway.com.sg [203.116.1.189]) by builder.freebsd.org (Postfix) with ESMTP id BC4D842C9 for ; Wed, 2 Feb 2000 22:53:28 -0800 (PST) Received: from asdf (dyn3-177cable.je1.singa.pore.net [202.169.241.177]) by eastgate.cyberway.com.sg (8.9.3/8.8.5) with SMTP id OAA26872; Thu, 3 Feb 2000 14:53:18 +0800 (SST) Message-ID: <007901bf6e99$76a5eb20$b1f1a9ca@singa.pore.net> From: "James Lim" To: "daniel B" , References: Subject: Re: RE:Weird Apache access log files sorry for the junk stuff! Date: Thu, 3 Feb 2000 14:53:17 -0800 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2919.6600 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6600 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Well, Seems u are having some problems from AOL . I got numerous hundreds of relaying requests from AOL. They are trying to use my server as a SMTP , and the log files are huge. Why are they doing this? Beats me. Regards, James Systems One Internet Services www.s1web.com sg.freebsd.org ----- Original Message ----- From: "daniel B" To: Sent: Wednesday, February 02, 2000 10:12 PM Subject: RE:Weird Apache access log files sorry for the junk stuff! > Sorry guys my apology the last posting I made has some 'junk' stuff that I > captured from the buffer and mistakenly pasted to the message... pine over > SSH is kind of flaky for me some times. > The posting should have looked like this: > > Hi Felas; > I was going through some of the access log for one of our website and I > get a lot of these: > > 205.188.209.244 - - [02/Feb/2000:07:49:37 -0800] "GET / HTTP/1.0" 200 6146 > 205.188.209.244 - - [02/Feb/2000:07:49:37 -0800] "GET / HTTP/1.0" 200 6146 > 205.188.209.244 - - [02/Feb/2000:07:49:38 -0800] "GET / HTTP/1.0" 200 6146 > . > . > . > > 205.188.209.240 - - [02/Feb/2000:11:56:25 -0800] "GET / HTTP/1.0" 200 6146 > 205.188.209.240 - - [02/Feb/2000:11:56:25 -0800] "GET / HTTP/1.0" 200 6146 > 205.188.209.240 - - [02/Feb/2000:11:56:26 -0800] "GET / HTTP/1.0" 200 6146 > . > . > . > now look at this: > % nslookup 205.188.209.244 > > > Name: stress-dt03.proxy.aol.com > Address: 205.188.209.244 > > and; > % nslookup 205.188.209.240 > > > Name: cache-dt12.proxy.aol.com > Address: 205.188.209.240 > > These requests are realy flooding my webserver should I block the above > two IPs at the firewall? what is aol trying to do?? > > > Thanks > > Dan > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message