What's up? Apache servers making 'return calls' to past clien t IPs!

Matt_Domsch@Dell.com Matt_Domsch at Dell.com
Tue Apr 23 11:10:00 CDT 2002


> Here, 'xxx.xxx.xxx.xxx' is the IP address of one of a pair of 
> web servers.
> Strangely, the above destination addresses had all previously 
> accessed the
> webserver about 15-30 minutes before the firewall log report of the
> attempted return outbound connection.

Just a thought...  They're probably using Persistent HTTP connections, which
are getting timed out after a while?  The web server thinks the connection
is still open, the firewall doesn't?

Thanks,
Matt

--
Matt Domsch
Sr. Software Engineer
Dell Linux Solutions www.dell.com/linux
Linux on Dell mailing lists @ http://lists.us.dell.com
#1 US Linux Server provider for 2001!




More information about the Linux-PowerEdge mailing list