Re: [users@httpd] Blocking harrassment

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



HI Jean,
try using .htaccess file for your required directory,

<limit GET>
allow all
deny from 69.50.168.130
</limit>

*** check permissions according to your requirements.

save this file as .htaccess in the required directory n make changes in ur httpd.conf accordingly.
write me for more details

regards
Ritesh Jhaveri
On 9/20/05, Jean-Christophe Montigny <jcm@xxxxxxxxxxx> wrote:
Hello,

I've noticed that, for about a week, i am being harrassed by always the
same IP, getting my index twenty times in a row but with a
sexual-explicit referrer :

69.50.168.130 - - [20/Sep/2005:00:04:38 +0200] "GET / HTTP/1.1" 200
27087 "http://**********************/" "Mozilla/4.0 (compatible; MSIE
6.0; Windows NT 5.1)" "-"

69.50.168.130 - - [20/Sep/2005:00:04:45 +0200] "GET / HTTP/1.1" 200
27078 "********************************" "Mozilla/4.0 (compatible; MSIE
6.0; Windows NT 5.1)" "-"

As a result, my stats are totally crapped ou.

I tried to add a firewall rule to block the guy :
iptables -A INPUT -p tcp -s 69.50.168.130 -j DROP

However, they're still in my logs and can still access my machine. I
guess the IP is spoofed or something.

My question is, how can I block that ? I can't believe i should try to
filter through MAC.. Perhaps my rule is wrong ? Is there a way in apache
to refuse serving a given ip?

Thanks,
--
Jean-Christophe Montigny
Responsable Commission Web, Association Planètes
Responsable serveurs assoces.com, Association Planètes
Etudiant de deuxième année à Grenoble Ecole de Management
Majeure Conseil en Organisation des Systèmes d'Information


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx




[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux