----- Original Message ----- From: "Jack Stone" <antennex@xxxxxxxxxxx>
To: <users@xxxxxxxxxxxxxxxx> Sent: Friday, April 29, 2005 2:25 PM Subject: RE: [users@httpd] Re: Redirect Matching Question
>From: Michelle Konzack <linux4michelle@xxxxxxxxxx>Reply-To: users@xxxxxxxxxxxxxxxx To: users@xxxxxxxxxxxxxxxx Subject: [users@httpd] Re: Redirect Matching Question Date: Fri, 29 Apr 2005 19:59:49 +0200 Am 2005-04-29 13:39:46, schrieb Joshua Slive: > On 4/29/05, Jack Stone <antennex@xxxxxxxxxxx> wrote: > In fact, it does seem to be catching the request. Notice the "302" > status code which indicates a redirect. > > Overall, you're wasting your time. Worms *do not* follow redirects. > The best a redirect could do is keep this request out of your error > log. But good admins want to see this information in their error log. But because I have severalt 1000 daily which let my logs explode, I have greate a file in the Web-Root "default.ida" because this is not a WORW it is a FileSharing-Tool. Now the request do not more produce 600 Bytes bytes but only 150 Bytes. Bisous MichelleNow THAT sounds like a good idea..... thanks!
I also created a file default.ida and my logs aren't as hectic. I also created blank files for most frontpage files for the worms that search for those. It did stop most of the 302 and 404 errors produced by the worms. If this is incorrect and should be changed, please let me know.
Thanks,Kevin
--------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|