Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (herse.apache.org: domain of leonardo.neves@gmail.com
 designates 66.249.82.232 as permitted sender)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
        s=beta; d=gmail.com;
        h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
        b=mGYWZJzbIMNNKWsRGQnegOmtlJZte5GIlmu0tUa8F4a0TuplSk2dCajivGy9JvAvjkZcgFnofQyatMARj8n71xw1prx8QDSzWK+1SRlBRALFvcoKJEqEWmL77wsDGOzy5fzOL5AZfryLmLBoWk9gQR3ibnpB3Hquih4948yHqJ8=
Message-ID: <4730c7e40611080840p11db164bpe5eb83e1d626efc7@mail.gmail.com>
Date: Wed, 8 Nov 2006 14:40:06 -0200
From: "Leonardo Neves" <leonardo.neves@gmail.com>
To: users@httpd.apache.org
In-Reply-To: <e498c1660611080814t4cb42b5as56fe736b73c4af00@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <4730c7e40611080807t350fb869t4089c869ae6a1fc9@mail.gmail.com>
	 <e498c1660611080814t4cb42b5as56fe736b73c4af00@mail.gmail.com>
Subject: Re: [users@httpd] DDOS

Thanks for reply. I removed mod_proxy and the problem continued. Some
another ideia?

Leo.

2006/11/8, Joshua Slive <joshua@slive.ca>:
> On 11/8/06, Leonardo Neves <leonardo.neves@gmail.com> wrote:
> > Hi,
> >
> > My apache server this receiving flooding from solicitations HTTP of
> > diverse places, as shown in log below (access_log). How to block this?
> > My environment is mandriva 2007.0, kernel 2.6.17-5mdv
> > packages:
> >
> > 207.44.158.30 - - [01/Nov/2006:21:07:04 -0300] "GET
> > http://www.yceml.net/0717/10371789-3.gif HTTP/1.1" 206 300
> > "http://auction
> > 24.ws/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT)"
> > 66.79.189.8 - - [01/Nov/2006:21:06:54 -0300] "POST
> > http://219.133.51.184/login HTTP/1.1" 200 260
> > "http://qqshow.qq.com/inc/i_l
> > .shtml" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
>
> It looks like you are running an open proxy server.
> http://httpd.apache.org/docs/1.3/misc/FAQ.html#proxyscan
>
> You should remove mod_proxy if you don't need it, or at the very least set
> ProxyRequests Off
>
> Joshua.
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org