Ruby on Rails Tuesday, December 29, 2015

On Tuesday, December 29, 2015 at 6:13:52 PM UTC, Torsten Rüger wrote:
> Hi,
>
>
> i've been getting the subject error for some while in production. 
> I've tried to find out what that connect even means with little avail. 
> But i was generally surprised how much hacking attempts are being made, so i'm pretty sure it's ill intent.

CONNECT is an http method used for proxies to allow tunnelling arbitrary traffic through a proxy: basically someone has been scanning for misconfigured proxies (and probably other stuff too). Just a fact of life really.
>
>
> Just, i can't seems to get rid of the error. I tried to add rescue_from to my ApplicationController, as in:
>
>
>
>   rescue_from ActionController::RoutingError, with: :error_404
>
>

This type of routing error can't be rescued like that since rails doesn't know which controller should be used. If it bothers you then you could try blocking it at the webserver level (eg https://httpd.apache.org/docs/2.4/mod/core.html#limit)

Fred

> but that doesn't do it. The call goes from phusion through rack and rails, and ends in 
> actionpack-4.2.5/lib/action_dispatch/middleware/debug_exceptions.rb:21:in `call'
>
>
>
> Has anyone encountered this in the wild ?
>
>
> Torsten

--
You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group.
To unsubscribe from this group and stop receiving emails from it, send an email to rubyonrails-talk+unsubscribe@googlegroups.com.
To post to this group, send email to rubyonrails-talk@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/rubyonrails-talk/29ce48c7-c68d-4b29-ab7f-cf80519ed91a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

No comments:

Post a Comment