Re: Stealthing a vhost

[Igor Cicimov <icicimov@xxxxxxxxx>]

Ok for the first problem, apache responding to the OPTIONS request...What about Limit and LimitExcept commands? Limiting the OPTIONS to the local network or blocking them totally maybe?

    
Cheers

On Thu, May 27, 2010 at 2:10 PM, J. Greenlees <lists@xxxxxxxxxxxxxxxxxxx> wrote:

Peter Horn wrote:

On 06:59, Igor Cicimov wrote:
 >
 > Have you tried mod_security? It's very configurable so might suite
your needs.
 >

~snip~

I have read the mod_security docs, and it appears that the 'drop' action
is not available in my environment (Windows).

~snip~

Peter

Then you may have to consider changing environments to achieve your desired result.

personally, I would consider a permanent redirect to 127.0.0.1 for all but your one excepted case on access of the default virtual host.
their bots will screw their own server that way. ;)

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
 "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx