RE: [EMAIL PROTECTED] limiting connections per ip address in apache2 whenunder attack

2007-06-23 Thread Bob
hursday, June 21, 2007 7:11 PM To: users@httpd.apache.org Subject: Re: [EMAIL PROTECTED] limiting connections per ip address in apache2 whenunder attack I tried your AliasMatch .* -> /usr/local/www/data/noaccess.htm statement and get syntax error Saying "AliasMatch takes two a

Re: [EMAIL PROTECTED] limiting connections per ip address in apache2 whenunder attack

2007-06-21 Thread William A. Rowe, Jr.
Bob wrote: > > If this is a real attack then you were found by rolling through a whole > block of ip address looking for a open port 80. > Change your apache server to use different port say 7788 instead of port 80 > and then use the free www.zoneedit.com dns service to redirect all FQDN to > your

Re: [EMAIL PROTECTED] limiting connections per ip address in apache2 whenunder attack

2007-06-21 Thread graham
Bob wrote: If this activity continues for more that 10 days then it's not normal search engine indexing but really a attack designed to generate a denial of service situation for your server to stop the Chinese public from accessing you. The Chinese government is known to do this sort of thing t

RE: [EMAIL PROTECTED] limiting connections per ip address in apache2 whenunder attack

2007-06-21 Thread Bob
To: users@httpd.apache.org Subject: Re: [EMAIL PROTECTED] limiting connections per ip address in apache2 whenunder attack I have been running my apache web server in the above described manner for 6 years now with out any problems. This technique is described in a apache security book I have. I use a f

Re: [EMAIL PROTECTED] limiting connections per ip address in apache2 whenunder attack

2007-06-21 Thread graham
nt: Thursday, June 21, 2007 9:26 AM To: users@httpd.apache.org Subject: Re: [EMAIL PROTECTED] limiting connections per ip address in apache2 whenunder attack Luis Moreira (ESI-GSQP) wrote: This is not an "Apache answer", but it may help you. Do the IPs vary too much, or can you set up a

RE: [EMAIL PROTECTED] limiting connections per ip address in apache2 whenunder attack

2007-06-21 Thread Bob
EMAIL PROTECTED] limiting connections per ip address in apache2 whenunder attack Luis Moreira (ESI-GSQP) wrote: > This is not an "Apache answer", but it may help you. > > Do the IPs vary too much, or can you set up a firewall rule to block > incoming requests (any requests) from those

Re: [EMAIL PROTECTED] limiting connections per ip address in apache2 whenunder attack

2007-06-21 Thread graham
Luis Moreira (ESI-GSQP) wrote: This is not an "Apache answer", but it may help you. Do the IPs vary too much, or can you set up a firewall rule to block incoming requests (any requests) from those IP ? No, the ip addresses vary too much. I just started apache again, and the new batch of ip ad

Re: [EMAIL PROTECTED] limiting connections per ip address in apache2 whenunder attack

2007-06-21 Thread Joshua Slive
On 6/21/07, Luis Moreira (ESI-GSQP) <[EMAIL PROTECTED]> wrote: This is not an "Apache answer", but it may help you. Do the IPs vary too much, or can you set up a firewall rule to block incoming requests (any requests) from those IP ? Sort of your own very personal "black list"? Of course, should

RE: [EMAIL PROTECTED] limiting connections per ip address in apache2 whenunder attack

2007-06-21 Thread Luis Moreira (ESI-GSQP)
This is not an "Apache answer", but it may help you. Do the IPs vary too much, or can you set up a firewall rule to block incoming requests (any requests) from those IP ? Sort of your own very personal "black list"? Of course, should that address decide to post a legitimate request, it would get b