This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Wrong server

Not sure if this is the correct place to ask this, but here goes.

I look after serveral servers for a school software company. One of the them gets more than 100,000 requests a week similar to this

GET  /sav/CIDs/S000/SAVSCFXP/catalogue/sdds.esc_10.xml HTTP/1.1" 185 "-" "SophosAutoUpdate/2.7.4.317 SDDS/1.0 ...

Now its not much of an extra load on the system, but it means that 100,000 + updates are not getting full filled.

Has anyone any suggestions as to how to stop this, other than bounceing them back.   The ips they are coming from are ISPs or large school networks with lots of schools behind them.

Thanks

:51534


This thread was automatically locked due to age.
Parents
  • Hello grizle,

    apparently a number of endpints with Sophos installed has a HTTP updating location configured which maps to this server. As for how many updates fail - with the default 10 minute interval only about 100 "always on" clients are needed to generate this amount of requests.
    The only way to stop this is to find out where they come from, what's configured there and why it ends up at this server. Could be a reallocated static IP, an unqualified name incorrectly resolved due to DNS changes, or something different.

    Christian
    :51562
Reply
  • Hello grizle,

    apparently a number of endpints with Sophos installed has a HTTP updating location configured which maps to this server. As for how many updates fail - with the default 10 minute interval only about 100 "always on" clients are needed to generate this amount of requests.
    The only way to stop this is to find out where they come from, what's configured there and why it ends up at this server. Could be a reallocated static IP, an unqualified name incorrectly resolved due to DNS changes, or something different.

    Christian
    :51562
Children
No Data