Apache forbidden rule for Santy.A worm

This is an archive of the phpBB 2.0.x support forum. Support for phpBB2 has now ended.
Forum rules
Following phpBB2's EoL, this forum is now archived for reference purposes only.
Please see the following announcement for more information: viewtopic.php?f=14&t=1385785
espicom
Registered User
Posts: 17905
Joined: Wed Dec 22, 2004 1:14 am
Location: Woodstock, IL

Post by espicom » Thu May 04, 2006 1:48 am

My server rejects a few thousand attempts per week via the rewrite, according to my logs. Additional attacks that I haven't put rules in for account for a few hundred per week, but PHPBB deflects those on its own. Really, the only reason I bother with the rewrites is that it reduces the overhead from 20K bytes returned per attempt to 200 bytes. Even with 3M/bs available, that's signifant bandwidth savings!
Jeff
Fixing 1016/1030/1034 Errors | (obsolete link) | MySQL 4.1/5.x Client Error | phpBBv2 Logo in ACP
Support requests via PM are ignored!
"To be fully alive is to feel that everything is possible." - Eric Hoffer

Lord Raiden
Registered User
Posts: 391
Joined: Sat Jun 26, 2004 11:24 pm
Contact:

Post by Lord Raiden » Thu May 04, 2006 7:04 pm

After the initial wave of attacks by this worm, I haven't seen any sign of it since.
Steve Lake
-Owner/Admin/Author of:
-Raiden's Realm - Bringing Linux to the World

Locked

Return to “2.0.x Support Forum”