tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Assaf <ass...@yahoo.com>
Subject Re: Malicious host is crashing my server
Date Mon, 08 Nov 2010 09:09:12 GMT
DumpFilter is a good idea. For the time being we have decided to just block the 
ip address. If it comes again from a different IP, I guess we will need to 
further examine!

Thanks for all the good ideas

Assaf


----- Original Message ----
From: David Fisher <dfisher@jmlafferty.com>
To: Tomcat Users List <users@tomcat.apache.org>
Cc: Tomcat Users List <users@tomcat.apache.org>
Sent: Mon, November 8, 2010 12:00:49 AM
Subject: Re: Malicious host is crashing my server

You could modify the RequestDumpFilter to only dump the request for that ip 
address.

Regards,
Dave

Sent from my iPhone

On Nov 7, 2010, at 12:28 PM, Assaf <assafn@yahoo.com> wrote:

> A filter to block is good. But then I would not be able to see him doing it 
> again and then find out the issue.
> 
> Assaf
> 
> 
> ----- Original Message ----
> From: "Caldarale, Charles R" <Chuck.Caldarale@unisys.com>
> To: Tomcat Users List <users@tomcat.apache.org>
> Sent: Sun, November 7, 2010 6:48:20 PM
> Subject: RE: Malicious host is crashing my server
> 
>> From: Assaf [mailto:assafn@yahoo.com] 
>> Subject: Malicious host is crashing my server
> 
>> what can I do to better protect?
> 
> As a temporary preventive measure, you can disable access from this particular 

> IP address by configuring the RemoteAddrValve in server.xml:
> 
> <Valve className="org.apache.catalina.valves.RemoteAddrValve" 
> deny="79\.177\.23\.102"/>
> 
> That should give you some time to work out the real fix.
> 
> - Chuck
> 
> 
> THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
> MATERIAL and is thus for use only by the intended recipient. If you received 
> this in error, please contact the sender and delete the e-mail and its 
> attachments from all computers.
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
> 
> 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
> 

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


      

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message