Apache-Talk @lexa.ru 

Inet-Admins @info.east.ru 

Filmscanners @halftone.co.uk 

Security-alerts @yandex-team.ru 

nginx-ru @sysoev.ru 




pro -

      :: Apache-Talk
Apache-Talk mailing list archive (apache-talk@lists.lexa.ru)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Re: [apache-talk] IIS again ?

Hi All!

,   ...

Best regards,
Andrew Kopeyko <kaa@rambler-co.ru>

  Rambler Co.   http://www.rambler.ru/
  phone :       +7 095 745-3619
  fax :         +7 095 930-8100

---------- Forwarded message ----------
Date: Tue, 18 Sep 2001 20:31:28 +0200
From: Karsten W. Rohrbach <karsten@rohrbach.de>
To: Jim Arnold <jim@ohio.com>
Cc: freebsd-security@freebsd.org
Subject: Re: Nimda-A Worm/Virus threatens networks

Jim Arnold(jim@ohio.com)@2001.09.18 14:21:50 +0000:
> i am running an apache server on linux. how do i stop it from gobbling
> all my bandwidth? i'm being hit by dozens of different servers.

you might configure your 404 error handler to spit out a very small
file (for example containing just one space character '%20').

mod_throttle or other bandwidth control tools will not help, since the
worm hits each server it scan with a list of several uris and that's
pretty it.

if the worm catches a 404 http error it will cease scanning this
particular system. bad, that it does not honor redirect requests ;-)


=               Apache-Talk@lists.lexa.ru mailing list                      =
Mail "unsubscribe apache-talk" to majordomo@lists.lexa.ru if you want to quit.
=       Archive avaliable at http://www.lexa.ru/apache-talk                 =


Copyright © Lexa Software, 1996-2009.