[SWLUG] httpd return codes question

bascule asura at theexcession.co.uk
Fri Mar 18 22:38:29 UTC 2005


geraint, assuming that the following is the equivalent of your script i did:
[bascule at mycroft bascule]$ telnet 192.168.0.4 80
Trying 192.168.0.4...
Connected to watson.excession (192.168.0.4).
Escape character is '^]'.
GET http://ns43.hosteur.com/~arkdata/cgbdm.txt HTTP/1.1
Host: ns43.hosteur.com
Connection: close

HTTP/1.1 302 Found
Date: Fri, 18 Mar 2005 22:23:34 GMT
Server: Apache-AdvancedExtranetServer/1.3.28 (Mandrake Linux/3.2.92mdk) 
mod_perl/1.28 mod_ssl/2.8.15 OpenSSL/0.9.7b PHP/4.3.3
Location: https://ns43.hosteur.com/~arkdata/cgbdm.txt
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1

df
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<HTML><HEAD>
<TITLE>302 Found</TITLE>
</HEAD><BODY>
<H1>Found</H1>
The document has moved <A 
HREF="https://ns43.hosteur.com/~arkdata/cgbdm.txt">here</A>.<P>
</BODY></HTML>

0

Connection closed by foreign host.

seeing that 'https' rang bells, going back to my server config i remembered 
that i had played with redirecting all port 80 traffic to 443, my site hardly 
deserves the title, it's just a password protected server that dishes up my 
mp3s and also runs squirrelmail, seems like i left it doing that, would this 
mean that every query will now get a 302 return? in which case i assume that 
being - presumably -  a bot, it doesn't bother making a further request on 
port 443?

also when you say:
>> to POST the file /_vti_bin/_vti_aut/fp30reg.dll to my machine, 

>It tried to POST some info to the program (web forms can submit
>details this way - using POST).  Probably a (hacked) machine

are you saying that i misunderstand the POST item, 
that /_vti_bin/_vti_aut/fp30reg.dll is the intended recipient of the  - 
unseen - POST data?
this would make more sense and also be less worrying

bascule
On Friday 18 Mar 2005 22:07, Geraint Edwards wrote:
> {
>         sleep 2; echo "GET http://ns43.hosteur.com/~arkdata/cgbdm.txt
> HTTP/1.1" sleep 1; echo "Host: ns43.hosteur.com"
>         sleep 1; echo "Connection: close"
>         sleep 1; echo ""
>         sleep 2;
> } | telnet localhost 80
> ####### cut this line out ##########
>
> Put the above lines into a file (e.g. a file called "webtester").
> The following commands make it executable, then run the scrip

-- 
"there are a million sig's in the city, this is one of them"



More information about the Swlug mailing list