Re: [squid-users] mime / header in log files

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Sat, 19 Nov 2005 02:41:54 +0100 (CET)

On Tue, 15 Nov 2005, Brent Clark wrote:

> But what I find interesting is that when I use Limewire, (Limewire was
> configured to use a proxy), I see the following
>
> 1131984629.391 344902 192.168.111.213 TCP_MISS/200 3213 CONNECT
> 66.65.39.72:6348 - DIRECT/66.65.39.72 - [] []

Nice.. a client not identifying itself at all.

> So my question, why would a client need / want to disguise its self

Mainly to make your life harder.

> and do you not think it would be avisable / safe to deny based on no client
> declaration been given.

I would advocate in favor of blocking such clients.

It's a quite impolite to not send a User-Agent header in the request, and
practically required by the RFC (it's a SHOULD level requirement in the
RFC, i.e. you SHOULD put your feets on the floor before you jump off the
chair even if you in either case most likely do get off the chair in one
fashion or another, but not putting your feets on the floor first is
likely to cause some pain)

Regards
Henrik
Received on Fri Nov 18 2005 - 18:41:58 MST

This archive was generated by hypermail pre-2.1.9 : Thu Dec 01 2005 - 12:00:10 MST