Ok, here is the context. We've a server which is inside our network; on the server there is a Samba configured, providing access to a number of shares; there is also and Apache server providing other services (among them is also WebDav, but for svn folders, so they are different folders).
In the past months, I've seen that some windows machines would try to access (with PROPFIND) the same paths which they were accessing via SMB. Just to be clear, someone issuing a
where I knew that client would access
Since WebDAV is not enabled on those directories, the result at the moment is a 405 status (method not allowed).
In the recent weeks, I've seen a surge of PROPFINDs from a few machines; virus-scan didn't detect any problem on them, and they seem to behave normally.
How can I disable the PROPFIND from those machines? Is this a signal of some known problem? How can I further investigate them?