Re: Hierarchy of malformed requests and blocked IPs

2016-07-30 Thread itpp2012
See https://forum.nginx.org/read.php?2,267651 at this level nginx is not an advanced all layer firewall/ids/dds tool. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,268629,268646#msg-268646 ___ nginx mailing list nginx@nginx.org http://mailm

Re: Hierarchy of malformed requests and blocked IPs

2016-07-30 Thread li...@lazygranch.com
On Sat, 30 Jul 2016 23:49:30 +0300 "Valentin V. Bartenev" wrote: > On Saturday 30 July 2016 10:52:46 li...@lazygranch.com wrote: > > On Sat, 30 Jul 2016 13:18:47 +0300 > > "Valentin V. Bartenev" wrote: > > > > > On Friday 29 July 2016 23:01:05 li...@lazygranch.com wrote: > > > > I see a fair am

Re: Hierarchy of malformed requests and blocked IPs

2016-07-30 Thread Valentin V. Bartenev
On Saturday 30 July 2016 10:52:46 li...@lazygranch.com wrote: > On Sat, 30 Jul 2016 13:18:47 +0300 > "Valentin V. Bartenev" wrote: > > > On Friday 29 July 2016 23:01:05 li...@lazygranch.com wrote: > > > I see a fair amount of hacking attempts in the access.log. That is, > > > they > > show up wi

Re: Hierarchy of malformed requests and blocked IPs

2016-07-30 Thread itpp2012
A 400 doesn't reach location blocks. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,268629,268638#msg-268638 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Hierarchy of malformed requests and blocked IPs

2016-07-30 Thread li...@lazygranch.com
On Sat, 30 Jul 2016 13:18:47 +0300 "Valentin V. Bartenev" wrote: > On Friday 29 July 2016 23:01:05 li...@lazygranch.com wrote: > > I see a fair amount of hacking attempts in the access.log. That is, > > they > show up with a return code of 400 (malformed). Well yeah, they are > certainly malform

Re: Hierarchy of malformed requests and blocked IPs

2016-07-30 Thread Valentin V. Bartenev
On Friday 29 July 2016 23:01:05 li...@lazygranch.com wrote: > I see a fair amount of hacking attempts in the access.log. That is, they show up with a return code of 400 (malformed). Well yeah, they are certainly malformed. But when I add the offending IP address to my blocked list, they still sh

Hierarchy of malformed requests and blocked IPs

2016-07-29 Thread lists
I see a fair amount of hacking attempts in the access.log. That is, they show up with a return code of 400 (malformed). Well yeah, they are certainly malformed. But when I add the offending IP address to my blocked list, they still show up as malformed upon subsequent readings of access.log. That