Re: Denial of service attack

[Ace Kumar <ace@digiknow.com>]

******    message to minivend-users from Ace Kumar <ace@digiknow.com>     ******

On Tue, 13 Apr 1999, F.M. Taylor wrote:

If the machines you are running on are running apache (or another NCSA) or
netscape enterprise, and you are allowed to make your own .htaccess or
.nsconfig files (respectively), you can do something like this (in
.htaccess format):


<Limit GET>
order deny,allow
deny from 123.45.67.89 host.spider.com
allow from all
</Limit>

put that in your cgi-bin directory and you should be fine.


Ace


> > Hello everyone, we are currently having a problem with a type of denial of
> > service attack.  Apparently someone has been hitting our site with a
> > malicious robot (it doesn't check our robots.txt file) and our ISP has been
> > shutting down our site b/c we have been using over 90% of the CPU time on
> > our server.  I've set RobotLimit to 3 but I don't have ipfwadm to lockout
> > the offender.  Is this something i can run and install as a user (not as
> > root) and if so where do i get it?  Is there something else i can do?  Has
> > anyone else run into a similar problem yet?

-- 
   Simran (Ace) Kumar, Systems Integrator - DigiKnow LLC
          25700 Science Park Drive #260, Cleveland Ohio 44122
             Office: (216)292-7259         Fax (216)292-4952
                                                   www.digiknow.com


-
To unsubscribe from the list, DO NOT REPLY to this message.  Instead, send
email with 'UNSUBSCRIBE minivend-users' in the body to Majordomo@minivend.com.
Archive of past messages: http://www.minivend.com/minivend/minivend-list