I started seeing this error in my logs and was
wondering if anyone could tell me what it is:
pound: bad request "\200g^A^C" from <ip.nu.mb.er>

## Minimal sample pound.cfg
##
## see pound(8) for details


######################################################################
## global options:

User    "www-data"
Group   "www-data"
#RootJail       /chroot/pound

## allow PUT and DELETE also (by default only GET,
POST and HEAD)?:
#xHTTP 0
#
#WebDAV 0

## Logging: (goes to syslog by default)
##      0       no logging
##      1       normal
##      2       extended
##      3       Apache-style (common log format)
LogLevel        2

## check backend every X secs:
Alive           30

## use hardware-accelleration card supported by
openssl(1):
#SSLEngine      <hw>


######################################################################
## listen, redirect and ... to:

## redirect all requests on port 8888 ("ListenHTTP")
to the local webserver see "UrlGroup" below):
ListenHTTP
        Address         127.0.0.1
        Port            8080

        Service
                URL     ".*"
                HeadRequire     "Host: .*"

                BackEnd
                        Address 192.168.1.75
                        Port    80
                End
        End

End

ListenHTTP
        Address         192.168.1.115
        Port    80

        Service
                URL     ".*"
                HeadRequire     ".*sugar.domain.com.*"

                        Redirect       
"https://sugar.domain.com"
        End

        Service
                URL     ".*"
                HeadRequire    
".*vtiger.domain.com.*"

                        Redirect       
"https://vtiger.domain.com"
        End

#       Service
#               URL     ".*"
#               HeadRequire    
"myphpadmin.domain.com.*"
#
#                       Redirect       
"https://myphpadmin.domain.com"
#       End

#       Service
#               URL     ".*"
#               HeadRequire    
"phpmyadmin.domain.com.*"
#
#                       Redirect       
"https://phpmyadmin.domain.com"
#       End



End

ListenHTTPS
        Address         192.168.1.115
        Port            443
        Cert            "/etc/pound/certs/test.pem"

        AddHeader       "X-SSL-Request: 1"

        Service
                URL     ".*"
                HeadRequire     ".*sugar.domain.com.*"

                        BackEnd
                                Address 192.168.1.228
                                port    80
                        End
        End

        Service
                URL     ".*"
                HeadRequire    
".*vtiger.domain.com.*"

                Backend
                        Address 192.168.1.228
                        Port    80
                End
        End

        Service
                URL     ".*"
                HeadRequire     ".*domain.com.*"

                BackEnd
                        Address 192.168.1.76
                        Port    80
                End
        End
End

[...]

On Wed, 2006-03-08 at 18:21 -0800, Badiane Ka wrote:[...]

Don't worry too much about those - they are attacks (mostly by various
worms of the Code Red ilk) filtered out by Pound. We see dozens of those
per day per server (with Pound in the mix) quite harmless.[...]

Actually these were the connection tests I conducted
from outside to my server.

the from ip.nu.mb.er is the server from where I tried
to connect.

When I try from inside my lan I get this when using
firefox:
pound: no service "GET / HTTP/1.1" from 192.168.10.12

and this when using w3m:
pound: no service "GET / HTTP/1.0" from 192.168.10.15

and this from a remote server using w3m:
Mar 10 11:11:49 <myservername> pound: can't read
header
Mar 10 11:11:49 <myservername> pound: error read from
72.9.228.154: Connection timed out

and this from mozilla at a remote location:
pound: bad request "\200g^A^C" from <ip.nu.mb.er>

I'm running 2.0.2 on debian (compiled)

While monitoring apache2 which resides on another
server there is no traffic hitting the logs.

Badiane


--- Robert Segall <roseg(at)apsis.ch> wrote:
 [...]

[...]

On Fri, 2006-03-10 at 08:39 -0800, Badiane Ka wrote:[...]

Are you sure you are not somehow sending HTTPS traffic to an HTTP
listener?[...]

You are correct!  I realized that if I could access it
inside then my router might have been the problem and
low and behold it was.  I logged in to tell the group
the I do apologize for not checking more thoroughly
but not remembering when I had made the mistake cause
the resolution to come later than sooner.  Thank you
again for your support. 

I do have another question I will create another
thread for it.

Badiane

[...]