Re: How will i block this kind of request

From: Randal L. Schwartz (merlyn_at_stonehenge.com)
Date: 09/05/03 

Date: Fri, 05 Sep 2003 20:17:31 GMT

>>>>> "Hans" == Hans <nomailwanted@ikaze.is-a-geek.org> writes:

>> 64.140.34.130 - - [04/Sep/2003:16:51:28 -0400] "GET
>> /default.ida?XXXXXXXXXXXXXXX

Hans> Setup a redirect to microsoft.com for those idiots. Could be done both
Hans> in Apache or with a 404 page. Another option is to build a script that mails
Hans> the abuser.

Redirects won't be followed.

Either drop the connection as quick as you can (some firewall filters
can do this even before your webserver sees it), or if you have the
resources, respond as-slow-as-m-o-l-a-s-s-e-s, so that you can keep
the next guy from getting tied up. 

-- 
Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095
<merlyn@stonehenge.com> <URL:http://www.stonehenge.com/merlyn/>
Perl/Unix/security consulting, Technical writing, Comedy, etc. etc.
See PerlTraining.Stonehenge.com for onsite and open-enrollment Perl training!

Relevant Pages