string match support and apache 408 problem

[Dark0]

after adding $IPTABLES -A INPUT -i eth0 -p tcp -d $IP --dport http -m string --string ".exe?/c+tftp" -j DROP $IPTABLES -A INPUT -i eth0 -p tcp -d $IP --dport http -m string --string "/default.ida?" -j DROP   to my rc.firewall script i get a lot of   24.29.116.XX - - [08/Feb/2002:15:56:19 -0300] - 408 -   in my apache logs , how could i modify my iptables script or my httpd.conf in order to have a clean log?