what refer means in the log

Hello AreshAreshi,

it referer and indicates the page that referred to www.mydomain.com (i.e. contains the link to /cc/imageproxy).

Christian

hi QC

Thanks for the reply

why we see  my website refering to shakko-kitsune.livejournal.com/1238077.html" this  is not my website!!

Thanks

Hello AreshAreshi,

if I interpret the log correctly it's the other way round - this livejournal site refers to an image (residing on an internal server) that is served by imageproxy on mydomin, this would be the M502....jpg that has about 2.5MB.

Christian 

Yes, I think your last post is correct.   If you don't want that site to pull from your site, you will need to implement either Reverse Authentication (to authorize specific users) or a site-path-routing rule that has "Access Control" rules specified (to authorize specific network addresses.)

You may find my port usage post helpful, which summarizes how access control applies to different UTM functions:

https://community.sophos.com/products/unified-threat-management/f/general-discussion/100848/how-to-understand-utm-port-usage

Hi Guy's

Thank you all for for your reply.

I awalys thought that the refer is other way, becuse when I open the website from my side and open a link I see it refer to the same site.

But if you think this means thay are harvesting some picture from the website behind the utm then is ok, coz it is allowed by the web site owner.

Thanks you