Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Message-Id: <5.2.0.9.0.20031002125812.03690a78@unix.chanweiss.com>
Date: Thu, 02 Oct 2003 13:00:15 -0400
To: users@httpd.apache.org
From: "Jeremy D. Weiss" <jdweiss@chanweiss.com>
In-Reply-To: <0DFFBE2E899E804E9A5710F7071224381E7CB4@sjvapcd-mail.valley
 air.org>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Subject: RE: [users@httpd] new access_log messages

At 12:42 PM 10/02/2003, you wrote:
>Thanks for the info! Is there anything I can do to prevent this kind of
>traffic? Or is this just a "fact of Internet life"? I keep up to date with
>all patches and security updates from RedHat, I've tried to secure the
>server as much as possible, are there other things I should do? Is there
>some AV software for Linux/Unix that would help me in this situation?
>Suggestions?

well, which kind of traffic are you referring to?  You had both robots and 
attempted-IIS attacks in there.  The robot traffic is benign (and, in fact, 
some would argue actually _useful_).  The IIS attacks however? well, there 
are modules and scripts that can try to filter it out (look through the 
mailing list archives for either "iis" or "code red" or "nimda").  Rest 
assured, none of these attacks are worth a darn, against an apache 
server...they're just a nuisance.

==Jeremy 


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org