Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 23 May 1999 23:05:15 -0600
From:      Brett Glass <brett@lariat.org>
To:        Michael Richards <026809r@dragon.acadiau.ca>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: Denial of service attack from "imagelock.com"
Message-ID:  <4.2.0.37.19990523230210.0457f8a0@localhost>
In-Reply-To: <Pine.GSO.4.05.9905240157240.20631-100000@dragon>
References:  <4.2.0.37.19990523191423.04639500@localhost>

next in thread | previous in thread | raw e-mail | index | archive | help
Without a firewall either internally or externally, your best bet
is to put "deny from 209.133.111" in your .htaccess file or
in Apache's access.conf file.

You should also complain to dlr@above.net and abuse@above.net.
Include some log excerpts to show the nature of the attack.

--Brett

At 02:00 AM 5/24/99 -0300, Michael Richards wrote:
>On Sun, 23 May 1999, Brett Glass wrote:
>
> > The Webmasters on this list may want to look over their logs to see
> > if they've been hit and not known it. grep your logs for imagelock.com;
> > if you find that they're abusing your server, you may want to firewall 
>I noticed we were hit by them this evening. 1250 requests in a few
>minutes. Since we're not running a firewall, is there a recommended method
>of filtering such people out? I think I did it with apache, but I'm
>wondering if there is a better method.
>
>-Michael



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4.2.0.37.19990523230210.0457f8a0>