From owner-freebsd-questions@FreeBSD.ORG  Wed Mar  9 19:57:26 2011
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 3F66B106564A
	for <freebsd-questions@freebsd.org>;
	Wed,  9 Mar 2011 19:57:26 +0000 (UTC)
	(envelope-from bonomi@mail.r-bonomi.com)
Received: from mail.r-bonomi.com (mx-out.r-bonomi.com [204.87.227.120])
	by mx1.freebsd.org (Postfix) with ESMTP id 14ED88FC19
	for <freebsd-questions@freebsd.org>;
	Wed,  9 Mar 2011 19:57:25 +0000 (UTC)
Received: (from bonomi@localhost)
	by mail.r-bonomi.com (8.14.4/rdb1) id p29K664k013470;
	Wed, 9 Mar 2011 14:06:06 -0600 (CST)
Date: Wed, 9 Mar 2011 14:06:06 -0600 (CST)
From: Robert Bonomi <bonomi@mail.r-bonomi.com>
Message-Id: <201103092006.p29K664k013470@mail.r-bonomi.com>
To: freebsd-questions@freebsd.org, peter@vfemail.net
In-Reply-To: <20110309152546.54D93106564A@hub.freebsd.org>
X-Mailman-Approved-At: Wed, 09 Mar 2011 20:01:59 +0000
Cc: 
Subject: Re: Nonsensical Web Log Entries
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 09 Mar 2011 19:57:26 -0000

> From owner-freebsd-questions@freebsd.org  Wed Mar  9 10:40:23 2011
> Date: Wed, 09 Mar 2011 09:57:03 -0500
> To: freebsd-questions@freebsd.org
> From: peter@vfemail.net
> Subject: Nonsensical Web Log Entries
>
>
> I was looking at my Web log this morning, and a bunch of nonsensical 
> entries like these caught my attention:
>
> 124.226.181.80 - - [09/Mar/2011:09:49:58 -0500] "GET http://www.yahoo.com/ HTTP/1.0" 301 294 "-" "Mozilla/4.0 (compatible; > MSIE 6.0; Windows NT 5.1; SV1)"
> 123.10.97.102 - - [09/Mar/2011:09:50:01 -0500] "GET http://makeabank.com/faq.cgi HTTP/1.0" 404 3485 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" 
> 115.225.166.2 - > - [09/Mar/2011:09:50:04 -0500] "GET http://join1.winhundred.com/affiliate/link.php?ref=35840&productid=7178 HTTP/1.0" 404 3485 "http://www.wingclips.com/" "Mozilla/4.0 (compatible; > MSIE 6.0; Windows NT 5.1; SV1)"
> 114.97.197.184 - - [09/Mar/2011:09:50:15 -0500] "GET http://www.tosunmail.com/proxyheader.php HTTP/1.0" 301 313 "http://www.cashsoldier.com/VerifyerLevel.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"
>
> Is my FreeBSD box serving as some kind of Web proxy?

Your box is _not_ doing the proxying.  that's why it's signalling errors
for those requests.

The perpetrators are _hoping_ you are running a misconfigured proxying front-
end.