Thanks Fred, strange to think there should be an error that can't be handled in rails. Still, thanks for the answer, which i am unfortunately not sure i understand.
Are you saying i should have a <Limit CONNECT> </Limit> On Tuesday, 29 December 2015 21:29:00 UTC+2, Frederick Cheung wrote: > > On Tuesday, December 29, 2015 at 6:13:52 PM UTC, Torsten Rüger wrote: > > Hi, > > > > > > i've been getting the subject error for some while in production. > > I've tried to find out what that connect even means with little avail. > > But i was generally surprised how much hacking attempts are being made, > so i'm pretty sure it's ill intent. > > CONNECT is an http method used for proxies to allow tunnelling arbitrary > traffic through a proxy: basically someone has been scanning for > misconfigured proxies (and probably other stuff too). Just a fact of life > really. > > > > > > Just, i can't seems to get rid of the error. I tried to add rescue_from > to my ApplicationController, as in: > > > > > > > > rescue_from ActionController::RoutingError, with: :error_404 > > > > > > This type of routing error can't be rescued like that since rails doesn't > know which controller should be used. If it bothers you then you could try > blocking it at the webserver level (eg > https://httpd.apache.org/docs/2.4/mod/core.html#limit) > > Fred > > > but that doesn't do it. The call goes from phusion through rack and > rails, and ends in > > > actionpack-4.2.5/lib/action_dispatch/middleware/debug_exceptions.rb:21:in > `call' > > > > > > > > Has anyone encountered this in the wild ? > > > > > > Torsten > -- You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/rubyonrails-talk/95d71042-ad8b-406b-82c2-c0dcf408d704%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
