Re: [squid-users] Strange entries from my log

From: Ralf Hildebrandt <Ralf.Hildebrandt_at_charite.de>
Date: Tue, 15 Oct 2013 10:52:01 +0200

> >Oct 14 09:06:47 proxy-cvk-1 squid[12081]: internalStart: unknown request:#012GET /squid-internal-static/icons/silk/arrow_up.png HTTP/1.1#015#012Host: c-69-250-37-253.hsd1.dc.comcast.net#015#012User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Firefox/24.0#015#012Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8#015#012Accept-Language: en-US,en;q=0.5#015#012Accept-Encoding: gzip, deflate#015#012Connection: keep-alive#015#012#015#012

After disabling the relaxed header paring I'm seeing for THESE requests:

2013/10/15 10:49:59| internalStart: unknown request: GET /squid-internal-static/icons/silk/arrow_up.png HTTP/1.1
Host: 83.172.86.66
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0)
Gecko/20100101 Firefox/24.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

2013/10/15 10:50:05| internalStart: unknown request: GET /squid-internal-static/icons/silk/arrow_up.png HTTP/1.1
Host: 83.172.86.66
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0)
Gecko/20100101 Firefox/24.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

The question being: Why can 83.172.86.66 query the Proxy at all?

-- 
Ralf Hildebrandt                   Charite Universitätsmedizin Berlin
ralf.hildebrandt_at_charite.de        Campus Benjamin Franklin
http://www.charite.de              Hindenburgdamm 30, 12203 Berlin
Geschäftsbereich IT, Abt. Netzwerk fon: +49-30-450.570.155
Received on Tue Oct 15 2013 - 08:52:17 MDT

This archive was generated by hypermail 2.2.0 : Tue Oct 15 2013 - 12:00:06 MDT