From owner-freebsd-stable@freebsd.org Thu Jan 24 18:39:14 2019 Return-Path: Delivered-To: freebsd-stable@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 87C3214B978A; Thu, 24 Jan 2019 18:39:14 +0000 (UTC) (envelope-from tech-lists@zyxst.net) Received: from out5-smtp.messagingengine.com (out5-smtp.messagingengine.com [66.111.4.29]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 500D877F6E; Thu, 24 Jan 2019 18:39:12 +0000 (UTC) (envelope-from tech-lists@zyxst.net) Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id D1D32236DF; Thu, 24 Jan 2019 13:39:05 -0500 (EST) Received: from mailfrontend1 ([10.202.2.162]) by compute4.internal (MEProxy); Thu, 24 Jan 2019 13:39:05 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zyxst.net; h= date:from:to:cc:subject:message-id:mime-version:content-type; s= fm1; bh=m0K+YysQeWNbWsSq3ZpVl24pI9JbhZ5ZG+f4/PyW/CY=; b=KiC+c/oG t7wa9mZ91391ptRxxSKwdBjNiUufZoQ7ne92JAPBHoDOGohItR+rrHh3kJj627aq XaMlJjplvlCGerYXsnnexs50zDHhYOKks4qyBx3gVKWEH1dM/HkzFeZz3HE+sYPU ccY9452NKzq0xmdLl6Ja2fPlTWmXOc0ilKb76nR1Q7q2k7WutSyuUeGZd2jZz1d7 Uh1fNfsU8jez9dBWWVYITKEB9SOjlCfP7zndiVxZBXkRnTE2JAIbbBf+4VfLxtgC 4AAT3UmOFZM3SH1taeonFu32lAFhR4/ZQcCHf1IOdeNu9qxsaTXNTWJYBV+yM6fK SLeFO0T+DGG2Gg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:message-id :mime-version:subject:to:x-me-proxy:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm1; bh=m0K+YysQeWNbWsSq3ZpVl24pI9Jbh Z5ZG+f4/PyW/CY=; b=AhKNZpRk/4tltjPWXM+SuvKjsRWJKSaEojgLRwHcqUscY V5bunXeYn4mW9XOh3f1QFaZ/F4WSlSAWNSggyAs5EJW976rYjrsEtOEYa8aXH23E vokwTeCc2cCLFWzY5fJFytgMi2XMQiqyzqJp+2fDCi3NqA4P2FXrBXWJTPQcpJ1d CRhh3sgvJceH0eclswbzXmi0dlcYS3xAfa47E7YL70Hj/fzIs+aGmdSqIqk552Ct 9OWjOft0G7UERVB7Y40ND38Nw7N+i5p6TOkU9hzpqIFRluQzdf4Biubj8y7+3W5/ whbGbGuzs1QF4PXMs8PmxWLqXINxDY2XEj+3VHRag== X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedtledriedvgdduudefucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfquhhtnecuuegrihhlohhuthemucef tddtnecunecujfgurhepfffhvffukfggtggufgesthdtredttdervdenucfhrhhomhepth gvtghhqdhlihhsthhsuceothgvtghhqdhlihhsthhsseiihiigshhtrdhnvghtqeenucfk phepkedvrdejtddrledurddutddunecurfgrrhgrmhepmhgrihhlfhhrohhmpehtvggthh dqlhhishhtshesiiihgihsthdrnhgvthenucevlhhushhtvghrufhiiigvpedt X-ME-Proxy: Received: from rpi3.zyxst.net (rpi3.zyxst.net [82.70.91.101]) by mail.messagingengine.com (Postfix) with ESMTPA id E5C21E4668; Thu, 24 Jan 2019 13:39:04 -0500 (EST) Date: Thu, 24 Jan 2019 18:39:02 +0000 From: tech-lists To: freebsd-stable@freebsd.org Cc: freebsd-security@freebsd.org Subject: apache protection Message-ID: <20190124183902.GC30993@rpi3.zyxst.net> Mail-Followup-To: freebsd-stable@freebsd.org, freebsd-security@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Disposition: inline User-Agent: Mutt/1.11.2 (2019-01-07) X-Rspamd-Queue-Id: 500D877F6E X-Spamd-Bar: ------- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=zyxst.net header.s=fm1 header.b=KiC+c/oG; dkim=pass header.d=messagingengine.com header.s=fm1 header.b=AhKNZpRk; spf=pass (mx1.freebsd.org: domain of tech-lists@zyxst.net designates 66.111.4.29 as permitted sender) smtp.mailfrom=tech-lists@zyxst.net X-Spamd-Result: default: False [-7.10 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_DKIM_ALLOW(-0.20)[zyxst.net:s=fm1,messagingengine.com:s=fm1]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:66.111.4.29]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; DMARC_NA(0.00)[zyxst.net]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; RCVD_COUNT_THREE(0.00)[4]; DKIM_TRACE(0.00)[zyxst.net:+,messagingengine.com:+]; RCPT_COUNT_TWO(0.00)[2]; MX_GOOD(-0.01)[in2-smtp.messagingengine.com,in1-smtp.messagingengine.com,in2-smtp.messagingengine.com,in1-smtp.messagingengine.com]; NEURAL_HAM_SHORT(-0.86)[-0.863,0]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:11403, ipnet:66.111.4.0/24, country:US]; IP_SCORE(-3.63)[ip: (-9.70), ipnet: 66.111.4.0/24(-4.69), asn: 11403(-3.66), country: US(-0.08)]; RCVD_IN_DNSWL_LOW(-0.10)[29.4.111.66.list.dnswl.org : 127.0.5.1] X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Jan 2019 18:39:14 -0000 Hi, I already use sshguard to block woodpeckers on sshd. Is there something similar for apache? If so, would it work with sshguard? I use pf for firewall. Basically something that's causing 404s 5 times per second. How can I (automatically) block it? thanks, -- J.