There's no way to block the requests from hitting your web server
without putting something like an application-layer firewall in front of
your web server, but you can keep Apache httpd from logging it: 
http://www.macosxhints.com/article.php?story=20030317133345352

is an example of how to do it. Basically it sets an environment variable
for requests resulting from MS infections and tells the logging system
not to record them. This particular example has them going into a
special log file, but personally I just drop them as shown in step 3.

-Tim


On Tue, 2003-07-15 at 19:03, Karthik Poobaladubramanian wrote:
> i got this following entries in my apache log.
> 
> there were around 800 entries from different IPs with in 5 to 6 minutes
> 
> 80.58.35.170 - - [15/Jul/2003:16:23:16 -0600] "GET
> /scripts/..%255c%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 1051 "
> 
> 
> digging deeper i found that [EMAIL PROTECTED] is behind it but could not find
> anything that i could do to stop it. should i live with a big fat log  
> file or is there something that I could be done about this? any pointers?
> 
> karthik
>  
> 
> 
> _______________________________________________
> General mailing list
> [email protected]
> http://brlug.net/mailman/listinfo/general_brlug.net


Reply via email to