Page 1 of 1

Logwatch question.

Posted: 2012/01/30 10:54:33
by DaemonProgrammr
One of the more valuable tools in managing my CentOS machine has been proven to be 'Logwatcher'. I love it to bits.

One section of the Logwatcher though, mentiones:

--------------------- httpd Begin ------------------------

Connection attempts using mod_proxy:
98.114.145.42 -> 205.188.251.1:443: 8 Time(s)
98.114.145.42 -> 205.188.251.43:443: 8 Time(s)
98.114.145.42 -> 205.188.251.6:443: 8 Time(s)
98.114.145.42 -> 64.12.202.116:443: 7 Time(s)
98.114.145.42 -> 64.12.202.1:443: 7 Time(s)
98.114.145.42 -> 64.12.202.8:443: 7 Time(s)

Doing some research, mod_proxy is typically used as just that: a proxy server. It's configurable in httpd.conf and seperate conf files in the httpd conf (sub)directory( /ies).



[u]But what I'm wondering: [/u]
The fact they were 'attempts', does that mean it failed?
Or am I unwittingly running an open proxy mirror?

I'm not using any proxy mechanisms or utilities (as far as I'm aware of). Would it be a smart thing to comment out the LoadModules for the proxy functions in httpd.conf?
Or am I missing something and would I break stuff? To be honest, those lines in Logwatch do make me a bit nervous..

Logwatch question.

Posted: 2012/01/30 11:00:41
by pschaff
[url=http://www.google.com/search?q=logwatch+%22Connection+attempts+using+mod_proxy%22&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-US:official&client=firefox-a]logwatch "Connection attempts using mod_proxy"[/url]