Wrong detection of remote IP after receiving malformed(?) HTTP request
-
Dharmarth Shah- State changed from new to open
- Assigned user set to Dharmarth Shah
Thank you for taking the time out to report the issue.
We tried out sending different kind of malformed requests (missing protocol version, large request uri, large query string etc) to the server and checked out the access logs carefully for subsequent requests. We were unable to reproduce the issue seen by you.
Could you please let us know how you created the specific malformed request that triggered off the issue for you?
Sidenote: The response code for all malformed requests detected by the server should be 4xx. The log entries posted by you have the response code as 200. Could you please also confirm that you pasted the intended logs here?
-
perrycz
Actualy that second request is from remote rails application (active resource). The log entries are right.
Do you want me to send more logs? It's from production environment which is remote IP sensitive so with WebROaR it doesn't work properly therefore I can't do so much tests.
Please Sign in or create a free account to add a new ticket.
With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.