Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsFree MagazinesWhite PapersSubmit Content
Discussion GroupsASP.NETWindows FormsLanguages.NET FrameworkVisual Studio.NET
Articles.NET FrameworkASP.NETToolsWindows Forms
.NET DirectoryOpen Source ProjectsUser GroupsWeb Resources
Related Topics
Visual Basic 6SQL ServerMS AccessOther DB ProductsMS Server ProductsMore Topics ...

.NET Forum / ASP.NET / General / July 2007

Tip: Looking for answers? Try searching our database.

Path 'CONNECT' is forbidden ??

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
NJ - 24 Jul 2007 18:00 GMT
Hi everyone,

Every now and then I'm receiving the error posted below. I"m routing all my
traffic through mod_proxy (apache) to my asp.net 2.0 (w2k3) machine. I can't
reproduce this error and my site appears fine through my browser. I'm
wondering if it is a search bot that is making these requests. Anyways, I
can't find anything on google about this particular message. Any ideas
greatly appreciated!!

--------------------
Event code: 3005
Event message: An unhandled exception has occurred.
Event time: 7/24/2007 9:14:37 AM
Event time (UTC): 7/24/2007 4:14:37 PM
Event ID: 1f45b2bb691b4d1da5bbde747ea34d1a
Event sequence: 4828
Event occurrence: 5
Event detail code: 0

Application information:
   Application domain: /LM/W3SVC/193669135/Root-1-128297109723670367
   Trust level: Full
   Application Virtual Path: /
   Application Path: C:\Inetpub\wwwroot\InnsOf\
   Machine name: APPLE

Process information:
   Process ID: 4608
   Process name: w3wp.exe
   Account name: NT AUTHORITY\NETWORK SERVICE

Exception information:
   Exception type: HttpException
   Exception message: Path 'CONNECT' is forbidden.

Request information:
   Request URL: http://216-55-149-22.dedicated.abac.net/ 
   Request path: /
   User host address: 216.55.149.22
   User:  
   Is authenticated: False
   Authentication Type:  
   Thread account name: NT AUTHORITY\NETWORK SERVICE

Thread information:
   Thread ID: 9
   Thread account name: NT AUTHORITY\NETWORK SERVICE
   Is impersonating: False
   Stack trace:    at
System.Web.HttpMethodNotAllowedHandler.ProcessRequest(HttpContext context)
  at
System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
  at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean&
completedSynchronously)


Custom event details:

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
-------------------------
NJ - 24 Jul 2007 22:44 GMT
Well...to possibly answer my question, I did find some information that said
that apache supports a connect verb, mainly used as a (http tunnelling) hack
to try and send SPAM. Hopefully it is just random spamming attempts.
Incidentally, IIS6 doesn't support the 'CONNECT' protocol - and so is not
vulnerable to this.

Just lifted from another page, no idea if it is actually true.

Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.