DO NOT REPLY [Bug 28478] New: - SEARCH log-entries

[bu...@apache.org]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=28478>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=28478

SEARCH log-entries

           Summary: SEARCH log-entries
           Product: Apache httpd-1.3
           Version: 1.3.27
          Platform: PC
               URL: http://vd-bovenkamp.nl
        OS/Version: Windows 9x
            Status: NEW
          Severity: Enhancement
          Priority: Other
         Component: Auth/Access
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: ceesbo@hotmail.com


Hi there,
I am using Apache for some time now and it appears to be a very solid base to 
expose my website!
But, in the access-log-file (very valuable!) I see many 'SEARCH' commands with 
a lot of 'x90's. These commands are rejected with a 414-error to my relief, but 
the log-file becomes larger and larger...
The first few times I saw the entries, I excluded the IP-addresses in my 
firewall, but it seemes that a lot of different addresses try to perform the 
SEARCH-command more often, and the IP-addresses are mostly undedicated 
addresses.

My question is, if this 'problem' is known by you and - of course - what I can 
do to prevent the log getting too large.

I tried the next entry in httpd.conf:
<Directory />
    Options FollowSymLinks MultiViews
    AllowOverride None
    <Limit GET POST OPTIONS PROPFIND>
        Order allow,deny
        Allow from all
    </Limit>
    <LimitExcept GET POST OPTIONS PROPFIND>
        Order deny,allow
        Deny from all
    </LimitExcept>
</Directory>

, but that does not exclude the SEARCH-command from being used.

Looking forward to your answer,

Cees.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org