I'm running a development LAMP server on Ubuntu 14.04. Today i have taken a look at the access.log and i found lots of these lines:
::1 - - [05/Jul/2015:01:24:14 +0200] "OPTIONS * HTTP/1.0" 200 110 "-" "Apache/2.4.7 (Ubuntu) OpenSSL/1.0.1f (internal dummy connection)"
and so much more of these:
127.0.0.1 - - [05/Jul/2015:01:50:01 +0200] "POST / HTTP/1.1" 403 347 "-" "-"
I was wondering whether this may be a problem caused by a miscoded RewriteRule (i am talking of about 1500 lines like the second one above only since the 5th July), or if i should take a deep look into a potential hack into the server or at least an attempt to do it.
What is your opinion? thanks
This may be useful:
into the apache's error.log i've found:
[Mon Jun 29 01:24:31.082231 2015] [rewrite:error] [pid 5311] [client 127.0.0.1:33583] AH00670: Options FollowSymLinks and SymLinksIfOwnerMatch are both off, so the RewriteRule directive is also forbidden due to its similar ability to circumvent directory restrictions : /var/www/html/
the weird thing, imo, is that i am running this server with these settings since May 2015 and this is the first time i get these errors. If it was a RewriteRule problem, why only now...?