Separating requests with persistent backends

Brad Fitzpatrick brad at danga.com
Tue Jun 19 18:46:18 UTC 2007


We had this happen to us awhile back, but it was fixed in 1.51 it looks
like.

What version are you using?


On Wed, 30 May 2007, André Cruz wrote:

> Hello all.
>
> Ever since I enabled persistent connections to the backends I get
> strange requests in my apache error logs. I'll paste one in the end
> of the mail.
>
> The request seems to be part of another request that was split
> somehow as it doesn't contain the first part (GET, POST,
> whatever ...). This wouldn't concern me much, as the request seems
> like SPAM, if not for the last part of the request: GET /js/pngfix.js
> HTTP/1.0. It seems that this bogus request is messing up the next
> request in line as well...
>
> Just so you know this is a Livejournal installation and the request
> seems to try to leave a comment. I was expecting Perlbal to discard
> these invalid requests or at least separate them...
>
> Is my analysis wrong?
>
> Thanks,
> André
>
> [Wed May 30 11:11:19 2007] [error] [client 10.135.64.111] Invalid
> method in request
> replyto=&parenttalkid=0&itemid=36185&journal=asminhasbijuterias&chrp1=36
> 185-67653-1178229600-WlQb7jSFB9foAIKwZSrC-ee52bf366bf
> 415ee4f0914bca253de5d&usertype=anonymous&guest_userpost=&guest_user_url=
> http%3A%2F%2Fxwgtkvyq.pochtamt.ru%
> 2F128.html&userpost=&password=uelpfcvylh&do_login=&captcha_chal=c0%
> 3A1178229600%3A3049%3A900%3A3ccnHlD8
> cVFNEP59a64T%
> 3A05cfd4ae84bf57bbc0819da874594362&answer=&checkCommentOrto=Verificar
> +Ortografia&submitpost=Publicar&submitpreview=Pr%26eacute%3B-
> visualizar&body=%3CA+href%3Dhttp%3A%2F%2Fvizthsbg342.nightmail.ru%
> 2F172.html%3E%EA%E0%F1%F1%EE%E2%FB%E9+%E0%EF%EF%E0%F0%E0%F2+%F7%E5%EB%
> FF%E1%E8%ED%F1%EA+%EF%F0%EE%E4%E0%EC+%E1+%F3%3C%2FA%3E%0Ahttp%3A%2F%
> 2Fvizthsbg342.nightmail.ru%2F172.html%0A%5Burl%3Dhttp%3A%2F%2Fvizthsbg3
> 42.nightmail.ru%2F172.html%5D%EA%E0%F1%F1%EE%E2%FB%E9+%E0%EF%EF%E0%F0%
> E0%F2+%F7%E5%EB%FF%E1%E8%ED%F1%EA+%EF%F0%EE%E4%E0%EC+%E1+%F3%5B%2Furl%
> 5D%0A%3CA+href%3Dhttp%3A%2F%2Flgykbcpb1815.nightmail.ru%2F259.html%3E
> %EC%E8%F2%FF%E5%E2+%EA%F0%E5%EF%E8%F2%E5%F1%FC+%EB%FE%E4%E8+%F1%EA%EE%
> F0%EE+%EB%E5%F2%EE%3C%2FA%3E%0Ahttp%3A%2F%2Flgykbcpb1815.nightmail.ru%
> 2F259.html%0A%5Burl%3Dhttp%3A%2F%2Flgykbcpb1815.nightmail.ru%2F259.ht
> ml%5D%EC%E8%F2%FF%E5%E2+%EA%F0%E5%EF%E8%F2%E5%F1%FC+%EB%FE%E4%E8+%F1%
> EA%EE%F0%EE+%EB%E5%F2%EE%5B%2Furl%5D%0A%3CA+href%3Dhttp%3A%2F%
> 2Fotisalrssj.krovatka.su%2F48.html%3E%F1%EA%EB%E0%E4+%EE%EF%F2%3C%2FA%
> 3E%0Ahtt
> p%3A%2F%2Fotisalrssj.krovatka.su%2F48.html%0A%5Burl%3Dhttp%3A%2F%
> 2Fotisalrssj.krovatka.su%2F48.html%5D%F1%EA%EB%E0%E4+%EE%EF%F2%5B%
> 2Furl%5D%0A%3CA+href%3Dhttp%3A%2F%2Faumqmvuo.front.ru%2F198.html%3E%EA
> %E0%F0%F
> 2%E0+%FD%EA%EE%EB%EE%E3%E8%F7%E5%F1%EA%E8+%ED%E5%E1%EB%E0%E3%EE%EF%F0%
> E8%FF%F2%ED%FB%F5+%EC%E5%F1%F2+%E2+%F1%E0%ED%EA%F2-%EF%E5%F2%F0%E1%F3%
> F0%E3%E5%3C%2FA%3E%0Ahttp%3A%2F%2Faumqmvuo.front.ru%2F198.html%0A%5Bu
> rl%3Dhttp%3A%2F%2Faumqmvuo.front.ru%2F198.html%5D%EA%E0%F0%F2%E0+%FD%
> EA%EE%EB%EE%E3%E8%F7%E5%F1%EA%E8+%ED%E5%E1%EB%E0%E3%EE%EF%F0%E8%FF%F2%
> ED%FB%F5+%EC%E5%F1%F2+%E2+%F1%E0%ED%EA%F2-%EF%E5%F2%F0%E1%F3%F0%E3%E5%
> 5B%2Furl%5D%0A%3CA+href%3Dhttp%3A%2F%2Fkmtyqtotn.rbcmail.ru%2F69.html%
> 3E%F8%E0%E1%EB%EE%ED%FB+%EE%F4%E8%F6%E8%E0%EB%FC%ED%FB%F5+%EF%E8%F1%
> E5%EC%3C%2FA%3E%0Ahttp%3A%2F%2Fkmtyqtotn.rbcmail.ru%2F69.html%0A%5Burl%
> 3Dhttp%3A%2F%2Fkmtyqtotn.rbcmail.ru%2F69.html%5D%F8%E0%E1%EB%EE%ED%FB+
> %EE%F4%E8%F6%E8%E0%EB%FC%ED%FB%F5+%EF%E8%F1%E5%EC%5B%2Furl%5D%0A%3CA
> +href%3Dhttp%3A%2F%2Faydxjiwakd705.nm.ru%2F314.html%3E%F2%F0%E8%EB%EE%E
> 3%E8%FF+%E3%EE%ED%F7%E0%F0%EE%E2%E0+%EE%E1%F0%FB%E2+%EE+%F0%F3%F1%F1%
> EA%EE%EC+%E8%E4%E5%E0%EB%E8%F1%F2%E5+%F0%E5%F4%E5%F0%E0%F2%3C%2FA%3E%
> 0Ahttp%3A%2F%2Faydxjiwakd705.nm.ru%2F314.html%0A%5Burl%3Dhttp%3A%2F%2Fa
> ydxjiwakd705.nm.ru%2F314.html%5D%F2%F0%E8%EB%EE%E3%E8%FF+%E3%EE%ED%F7%
> E0%F0%EE%E2%E0+%EE%E1%F0%FB%E2+%EE+%F0%F3%F1%F1%EA%EE%EC+%E8%E4%E5%E0%
> EB%E8%F1%F2%E5+%F0%E5%F4%E5%F0%E0%F2%5B%2Furl%5D%0A%3CA+href%3Dhttp%3
> A%2F%2Fsihocuax700.nightmail.ru%2F22.html%3E%F1%E8%EB%EE%E2%EE%E5+%F2%
> F0%EE%E5%E1%EE%F0%FC%E5%3C%2FA%3E%0Ahttp%3A%2F%
> 2Fsihocuax700.nightmail.ru%2F22.html%0A%5Burl%3Dhttp%3A%2F%
> 2Fsihocuax700.nightmail.ru%2F22.h
> tml%5D%F1%E8%EB%EE%E2%EE%E5+%F2%F0%EE%E5%E1%EE%F0%FC%E5%5B%2Furl%5D%0A
> %3CA+href%3Dhttp%3A%2F%2Fzkqoiwfu1470.nightmail.ru%2F196.html%3E%EA%EE
> %F1%F2%FE%EC%FB+%E2%EE%F1%F2%EE%F7%ED%FB%F5+%F2%E0%ED%F6%E5%E2%3C%2FA
> %3E%0Ahttp%3A%2F%2Fzkqoiwfu1470.nightmail.ru%2F196.html%0A%5Burl%
> 3Dhttp%3A%2F%2Fzkqoiwfu1470.nightmail.ru%2F196.html%5D%EA%EE%F1%F2%FE%
> EC%FB+%E2%EE%F1%F2%EE%F7%ED%FB%F5+%F2%E0%ED%F6%E5%E2%5B%2Furl%5D%0A%
> 3CA+hr
> ef%3Dhttp%3A%2F%2Fqefvobslo989.nightmail.ru%2F6.html%3E%F1%EA%F0%E8%EF
> %F2+%F7%E0%F2%E0%3C%2FA%3E%0Ahttp%3A%2F%2Fqefvobslo989.nightmail.ru%
> 2F6.html%0A%5Burl%3Dhttp%3A%2F%2Fqefvobslo989.nightmail.ru%2F6.html%5D%
> F1%EA%F0%E8%EF%F2+%F7%E0%F2%E0%5B%2Furl%5D%0A%3CA+href%3Dhttp%3A%2F%
> 2Ftpwhzcat346.nm.ru%2F200.html%3E%EE%F7%E8%F1%F2%EA%E0+%E2%EE%E4%FB+%
> E2+%E1%E5%EB%E3%EE%F0%EE%E4%E5+%E4%ED%E5%F1%F2%F0%EE%E2%F1%EA%E5%3C%2FA%
> 3E%0Ahttp%3A%2F%2Ftpwhzcat346.nm.ru%2F200.html%0A%5Burl%3Dhttp%3A%2F%
> 2Ftpwhzcat346.nm.ru%2F200.html%5D%EE%F7%E8%F1%F2%EA%E0+%E2%EE%E4%FB+%
> E2+%E1%E5%EB%E3%EE%F0%EE%E4%E5+%E4%ED%E5%F1%F2%F0%EE%E2%F1%EA%E5%5B%2Fu
> rl%5D%0AGET /js/pngfix.js HTTP/1.0
>


More information about the perlbal mailing list