Need help with reading log files and .htaccess

[jabecker]

I'm getting a lot of entries in my log file that look like this:

221.***.128.3 - - [28/Apr/2005:04:23:28 -0400] "GET http: //txsearch.epilot.com/getresults.aspx?aff=cosole&ip=128%2E208%2E231%2E61&keyword=Power+boating&source=s&r=www.cosole.com HTTP/1.1" 403 63989 "http://www.cosole.com" "Mozilla/5.0 (compatible; Windows 98; MSIE 6.0;)"

If I'm understanding this correctly, this request returned a 403, which is exactly what I want it to do. But it also appears that it returned an object of size 63989.

My question is, why was it so large? My 403 page is tiny. But when I get a bunch of these, my transfer rate goes way up. How do I stop it?

Thanks!

[edited by: jdMorgan at 1:40 pm (utc) on April 28, 2005]
[edit reason] Obscured specifics. [/edit]

[George_hu]

221.***.128.3 is China, are you sure you want this traffic?

-got any link to txsearch.epilot.com?
-the referrer is cosole.com or just faked
-why not install a decent search on the page?

[edited by: jdMorgan at 1:39 pm (utc) on April 28, 2005]
[edit reason] Obscured specifics. [/edit]

[George_hu]

You got 0 link on epilot.com

interesting...

[jdMorgan]

This was a request to connect to epilot *through* your server, and it apparently succeeded, only to be blocked by their server.

Basically, the request used your server as a proxy.

Jim

[jabecker]

ACK! So how do I stop this? I don't want these bozos using my server!