Re: [users@httpd] block empty referrer?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 9/12/05, Erik Svensson <ZekeVarg@xxxxxxxx> wrote:
> How can I block hits like this:
> 
> xx.xxx.xxx.xxx - - [04/Sep/2005:20:03:48 +0200] "GET / HTTP/1.0" 200
> 5109 "-" "-" "-"
> 
> I´m geting about 50-70 hits a day from different ip-numbers and there is
> constantly new ones, so blocking the ip-numbers in my firewall seems to
> be a hopless task.
> I´ve searched for and tried a lot of different ide´s for .htaccess files
> but not found anyone that worked for me.
> 
> By the way, does anyone know what is causing these hits?

SetEnvIf Referer ^$ empty_referer
Deny from env=empty_referer

But this will also deny some legitimate requests that have an empty
referer.  It would be a little safer to deny only if both Referer and
User-Agent were empty, but you would still block some good requests.

In general, 50-70 requests per day is just background noise for most
sites and should simply be ignored.

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux