What is PROPFIND?

[keyplyr]

195.220.36.33 - - [23/Oct/2003:03:52:39 -0700] "PROPFIND /images/image.gif HTTP/1.1" 405 573 "-" 

This IP came and got thousands of (only) images from directories disallowed by robots text. I banned the IP, however about 200 requests were denied (405) because of the method PROPFIND. What is PROPFIND?

[bakedjake]

It's a WebDAV method.

[msdn.microsoft.com...]

[keyplyr]

Thanks bakedjake. Not knowing a thing about this, I looked up WebDAV:

WebDAV – Standard used to save data to web site (as opposed to just reading it from a site). The IETF WWW Distributed Authoring and Versioning (webdav) working group is responsible for a set of WebDAV standards.

There is no reason to "save data" to my website by anyone other than myself.

I'm currently blocking: Microsoft-WebDAV-MiniRedir and have now added a generic block for: WebDAV

Can anyone suggest a benefit for me to allow this method of accessing my site? Thanks.

[bakedjake]

Can anyone suggest a benefit for me to allow this method of accessing my site?

k- It's used a lot by remote access WYSIWYG editors, like FrontPage. I know Exchange uses it too. Other web editors/web services may use it, but usually you know when you need it.

Are you on Apache? Apache does have a mod_webdav, but unless you are using an application that uses DAV, there's no reason to implement it on the server. Guessing from your post, I'd say it's reasonably safe (and probably well advised) to go ahead and block it, as it has been a source of exploits in the past on some platforms.

[keyplyr]

Thanks again bakedjake. Since the topic has appropriately pointed to Apache issues, I am continuing over here: [webmasterworld.com...]