On Thu, 2003-01-23 at 14:48, Brian Ashe wrote:
> On Thursday January 23, 2003 04:46, Peter Kiem wrote:
> > Hi Gordon,
> >
> > > The status 200 may indicate that you're vulnerable to the problem
> > > they're testing for.  What version of apache are you running?  On what
> > > platform?  Have you enabled proxying?
> >
> > That's what I am worried about.
> 
> Don't worry (yet). The 200 response doesn't mean they've gotten through.
> 
> Do this simple test...
...
> If you get your normal index page, then all is well.

Did you try your test?  I've tried the CONNECT command against several
servers, and always get a 405 message.  Apache should not (and in my
tests, does not) respond with a 200 code when you feed it the CONNECT
command.  Sending back the index page is not the expected or defined
behavior, so I'm not sure why you'd expect that outcome.




-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to