'Aight, wasn't aware this was Code Red at work. I was hoping there was a
way to keep every single request Code Red makes from being dumped to the
Apache logs, but at least now I know not to bother blocking individual
IPs.

Cheers,
Gregg


-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
Lorin
Sent: Tuesday, May 14, 2002 3:41 PM
To: [EMAIL PROTECTED]
Subject: Re: [bits] Script kiddies banging on my door - Apache 1.3

> >     He was asking how to block the request WITHOUT blacklisting
> >     the IP address.
>
> could, you'd still have loading issues from all the blocked requests.
you
> want it to be blocked way earlier on your net. ideally, at your
peremiter.


How could you set up a firewall that checks the content of the request?
Is there a free software solution that you could use?  Would it be
possible to implement in something like pf or netfilter?

I think you could configure something that would work with some
combination of apache's mod_rewrite and mod_proxy, but it seems like
that
would take more power than letting your webserver return a 404.

-Lkb



_______________________________________________
Bits mailing list
[EMAIL PROTECTED]
http://www.sugoi.org/mailman/listinfo/bits



_______________________________________________
Bits mailing list
[EMAIL PROTECTED]
http://www.sugoi.org/mailman/listinfo/bits

Reply via email to