RE: stopping "connect" attacks in apache (solution)

2007-06-30 Thread Bob
>>On Jun 15, 2007, at 7:49 PM, Bob wrote: >> Every time my apache server slows down or has denial of service the >> access >> log is full this >> >> 61.228.122.220 - "CONNECT 66.196.97.250:25 HTTP/1.0" 200 7034 "-" "-" >> 61.228.122.220 - "CONNECT 216.39.53.3:25 HTTP/1.0" 200 7034 "-" "-" >> 61.2

RE: stopping "connect" attacks in apache

2007-06-19 Thread Bob
he server. >This almost certainly indicates that you've got mod_proxy loaded or >something similar via mod_perl/mod_php/whatever, as the CONNECT >attack would get a "405 Method not allowed" error otherwise. >-Chuck ___________________ -Orig

Re: stopping "connect" attacks in apache

2007-06-18 Thread Chuck Swiger
On Jun 15, 2007, at 7:49 PM, Bob wrote: Every time my apache server slows down or has denial of service the access log is full this 61.228.122.220 - "CONNECT 66.196.97.250:25 HTTP/1.0" 200 7034 "-" "-" 61.228.122.220 - "CONNECT 216.39.53.3:25 HTTP/1.0" 200 7034 "-" "-" 61.228.122.220 - "CON