Hi, I have been using haproxy for my lab servers for a while and I like it. But i have seen in my web server logs (iis) that I get empty User-Agent strings on most attempts to access files that not exists. Some examples:
#Fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(User-Agent) cs(Cookie) cs(Referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken 2011-09-09 00:42:30 W3SVC143517500 WEB2 192.168.20.31 GET /muieblackcat - 80 - 219.94.198.229 HTTP/1.1 - - - www.ifj.se 404 0 1236 0 136 18031 2011-09-09 00:42:34 W3SVC143517500 WEB2 192.168.20.31 GET /phpMyAdmin-2.6.4-pl3/libraries/dbg/setup.php - 80 - 219.94.198.229 HTTP/1.1 - - - www.ifj.se 404 0 1236 0 169 21437 2011-09-09 00:42:34 W3SVC143517500 WEB2 192.168.20.31 GET /old/padmin/libraries/dbg/setup.php - 80 - 219.94.198.229 HTTP/1.1 - - - www.ifj.se 404 0 1236 0 159 20500 2011-09-09 00:42:34 W3SVC143517500 WEB2 192.168.20.31 GET /xampp/phpmyadmin/scripts/setup.php - 80 - 219.94.198.229 HTTP/1.1 - - - www.ifj.se 404 0 1236 0 160 18140 2011-09-09 00:42:40 W3SVC143517500 WEB2 192.168.20.31 GET /php-my-admin/scripts/setup.php - 80 - 219.94.198.229 HTTP/1.1 - - - www.ifj.se 404 0 1236 0 156 19046 2011-09-09 00:42:40 W3SVC143517500 WEB2 192.168.20.31 GET /typo3/phpmyadmin/scripts/setup.php - 80 - 219.94.198.229 HTTP/1.1 - - - www.ifj.se 404 0 1236 0 160 18031 2011-09-09 00:42:44 W3SVC143517500 WEB2 192.168.20.31 GET /admin/pma/scripts/setup.php - 80 - 219.94.198.229 HTTP/1.1 - - - www.ifj.se 404 0 1236 0 153 21796 2011-09-09 00:42:44 W3SVC143517500 WEB2 192.168.20.31 GET /admin/phpmyadmin/scripts/setup.php - 80 - 219.94.198.229 HTTP/1.1 - - - www.ifj.se 404 0 1236 0 160 20843 2011-09-09 00:42:44 W3SVC143517500 WEB2 192.168.20.31 GET /sql/scripts/setup.php - 80 - 219.94.198.229 HTTP/1.1 - - - www.ifj.se 404 0 1236 0 146 19953 2011-09-09 00:42:44 W3SVC143517500 WEB2 192.168.20.31 GET /php/scripts/setup.php - 80 - 219.94.198.229 HTTP/1.1 - - - www.ifj.se 404 0 1236 0 146 19015 2011-09-09 00:42:44 W3SVC143517500 WEB2 192.168.20.31 GET /PHPMYADMIN/+/scripts/setup.php - 80 - 219.94.198.229 HTTP/1.1 - - - www.ifj.se 404 0 1236 0 158 18187 How do i block empty User-Agent strings i haproxy.cfg? I have tried with the example in the documentation for haproxy: # ignore user-agents reporting any flavour of "Mozilla" or "MSIE", but # block all others. reqipass ^User-Agent:\.*(Mozilla|MSIE) reqitarpit ^User-Agent: Best Regards Mattias Edman Menco AB Mobil: 073 561 90 26 Tel: 08-551 178 10 E-post: mattias.ed...@menco.se Web: http://www.menco.se/ Adr: Dackevägen 33, 177 34 Järfälla Org nr: 556700-0053
