Re: Gotta love the server access logs!
From: Bill Unruh (unruh@physics.ubc.ca)Date: 04/09/02
- Next message: ujay: "Re: Gotta love the server access logs!"
- Previous message: Michael Erskine: "Re: Isn't this an oxymoron, linux & security?"
- In reply to: Joe: "Gotta love the server access logs!"
- Next in thread: ujay: "Re: Gotta love the server access logs!"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: unruh@physics.ubc.ca (Bill Unruh) Date: 9 Apr 2002 17:14:02 GMT
In <qwDs8.54$p56.9732@newsb.telia.net> Joe <somebody@absolutelynowhereonthishorridearth.com> writes:
]Hello!
]I'm using my Apache server at home mainly as a place to distribute my webcam
]pics and such. (Running a full site would violate the TOS with my cable
]internet host.)
]I noticed in the access logs that there's been tons of requests for various
]vital .exe programs for Microshaft servers. This in itself doesn't concern
]me since I'm powered by SuSE. (The little sticker I got with the
]distribution and put on my monitor sez so. ;-)
]However, should I take this as an indication that I should tighten things up
]for possible attacks on my Apache/Linux setup? I keep up with all the
]security updates provided by SuSE for 7.3, and I'm pretty sure that my
]firewall is setup okay, though I'm far from being a firewall expert at this
]point.
]If Windoze attacks are possibly getting through like that, does that
]necessarily mean that Apache attacks could get through just as easily? If
]so, what general areas of my system should I be looking at to aid in
]preventing this? Just a point in a general direction should be enough, as
]I'm a quick learner. :-)
Windoze attacks are not getting through. They are simply being recorded
as attempted, and failing. Those attacks try to get at the http port,
whether it is open or not-- they simply target random hosts. If you host
had not http server, they would still occur. They do not wait or want a
response. Susceptible servers (IE servers) act on the request and get
hosed without the far side having to do anything.
Apache has a pretty good record. Just keep up with security updates,
make sure you set it up securely, and relax.
- Next message: ujay: "Re: Gotta love the server access logs!"
- Previous message: Michael Erskine: "Re: Isn't this an oxymoron, linux & security?"
- In reply to: Joe: "Gotta love the server access logs!"
- Next in thread: ujay: "Re: Gotta love the server access logs!"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
