Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Date: Thu, 1 Apr 2004 11:03:27 -0500 (Est)
From: Joshua Slive <joshua@slive.ca>
To: "'users@httpd.apache.org'" <users@httpd.apache.org>
In-Reply-To: 
 <CC2B673A9CDCD14BBC010575CD4FD3FD3750E0@dfjcnj-exch.falconjet.com>
Message-ID: <Pine.WNT.4.58.0404011101330.2032@HEC-4949>
References: <CC2B673A9CDCD14BBC010575CD4FD3FD3750E0@dfjcnj-exch.falconjet.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Subject: Re: [users@httpd] how to prevent malicious scripting attack


On Thu, 1 Apr 2004, Liu, Jack wrote:
>   Does the HTTP server have the ability to detect such "pattern of behavior"
> accordingly?

No.

>   If not, any idea of other HTTP server which can do this, detecting such
> "pattern of behavior" (so that we may block it in the router).

I think you answered your own question.  This kind of blocking is most
efficiently accomplished at the router/firewall.  You firewall should have
rules limitting the packets-per-ip address or something of the sort.

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org