Re: Could be a stupid question...

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Monday 17 May 2004 10:55 am, Dennis Morgan wrote:

> Hi All...
> I am just writing to know if there is a way to BLOCK certain types of
> requests getting to to the webserver?
>
> at present i am getting alot of problems with people using SEARCH requests
>
> ie SEARCH / and a load of escape characters trying to get unauthorised
> access. I would like to know if there is a way with netfilter to drop these
> packets?

No.   This is an OSI layer 7 (application) problem - you cannot solve it using 
an OSI layer 3/4 (packet filter) solution.

Look into an HTTP proxy server such as Squid.

Regards,

Antony.

-- 
Software development can be quick, high quality, or low cost.

The customer gets to pick any two out of three.

                                                     Please reply to the list;
                                                           please don't CC me.



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux