Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (hermes.apache.org: local policy)
Message-ID: <42504463.7080901@maxnet.co.nz>
Date: Mon, 04 Apr 2005 07:30:43 +1200
From: zcat <zcat@maxnet.co.nz>
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US;
 rv:1.7.5) Gecko/20050105 Debian/1.7.5-1
MIME-Version: 1.0
To: users@httpd.apache.org
References: <424FE195.6000400@ccs.neu.edu>
In-Reply-To: <424FE195.6000400@ccs.neu.edu>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: [users@httpd] Is There A Way To Disable SEARCH?

David P. Donahue wrote:

> Every once in a while, my access log gets flooded with massive byte 
> arrays following a SEARCH command, the intent of which I can only 
> assume is to hit some exploit that some other server has (or had).  Is 
> there a way I can set Apache to just ignore all SEARCH commands (all I 
> really need is GET and POST)?  Just trying to keep my logs from 
> getting flooded with garbage data.  Thanks.

They're usually scanning by IP address, so set the default page to 
something small that you don't bother logging and use named virtual host 
entries for your real content.


-- 
On June 1, 2001, Steve Ballmer, CEO of Microsoft, told the Chicago Sun-Times: "Linux is cancer."
Unsurprisingly that's incorrect; LINUX was released on August 25th 1991 and is therefore a Virgo.


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org