httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Rit Jhaveri <ritch...@gmail.com>
Subject Re: [users@httpd] Blocking harrassment
Date Tue, 20 Sep 2005 04:07:00 GMT
HI Jean,
try using .htaccess file for your required directory,

<limit GET>
allow all
deny from 69.50.168.130 <http://69.50.168.130>
</limit>

*** check permissions according to your requirements.

save this file as .htaccess in the required directory n make changes in ur
httpd.conf accordingly.
write me for more details

regards
Ritesh Jhaveri
On 9/20/05, Jean-Christophe Montigny <jcm@assoces.com> wrote:
>
> Hello,
>
> I've noticed that, for about a week, i am being harrassed by always the
> same IP, getting my index twenty times in a row but with a
> sexual-explicit referrer :
>
> 69.50.168.130 <http://69.50.168.130> - - [20/Sep/2005:00:04:38 +0200] "GET
> / HTTP/1.1" 200
> 27087 "http://**********************/" "Mozilla/4.0 (compatible; MSIE
> 6.0; Windows NT 5.1)" "-"
>
> 69.50.168.130 <http://69.50.168.130> - - [20/Sep/2005:00:04:45 +0200] "GET
> / HTTP/1.1" 200
> 27078 "********************************" "Mozilla/4.0 (compatible; MSIE
> 6.0; Windows NT 5.1)" "-"
>
> As a result, my stats are totally crapped ou.
>
> I tried to add a firewall rule to block the guy :
> iptables -A INPUT -p tcp -s 69.50.168.130 <http://69.50.168.130> -j DROP
>
> However, they're still in my logs and can still access my machine. I
> guess the IP is spoofed or something.
>
> My question is, how can I block that ? I can't believe i should try to
> filter through MAC.. Perhaps my rule is wrong ? Is there a way in apache
> to refuse serving a given ip?
>
> Thanks,
> --
> Jean-Christophe Montigny
> Responsable Commission Web, Association Planètes
> Responsable serveurs assoces.com <http://assoces.com>, Association
> Planètes
> Etudiant de deuxième année à Grenoble Ecole de Management
> Majeure Conseil en Organisation des Systèmes d'Information
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
>

Mime
View raw message