Re: Help Needed With DoS Attack

2007-07-16 Thread Jon Dowland
If you are using apache, mod_security gives you most of this functionality. -- Jon Dowland -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Help Needed With DoS Attack

2007-07-15 Thread Aenn Seidhe Priest
Thanks, that'll be very useful. On 15.07.2007 at 16:56 Frank Hempel wrote: >in case your webserver is an apache have you already checked out >mod_evasive (http://www.zdziarski.com/projects/mod_evasive/). Haven't >tried it myself, but on their page they write: "mod_evasive is an >evasive maneuv

Re: Help Needed With DoS Attack

2007-07-15 Thread Frank Hempel
Aenn Seidhe Priest schrieb: Hello, a webserver is under attack. What's required is some kind of filtering software and a firewall that could do the following: pass only valid HTTP GET requests and block all other HTTP methods (PUT, OPTIONS, CONNECT, etc.), possibly validate HTTP GET requests b

Re: Help Needed With DoS Attack

2007-07-15 Thread Aenn Seidhe Priest
On 15.07.2007 at 13:59 koffiejunkie wrote: >Aenn Seidhe Priest wrote: >> Hello, >> >> a webserver is under attack. >> >> What's required is some kind of filtering software and a firewall that >> could do the following: >> >> pass only valid HTTP GET requests and block all other HTTP methods (PU

Re: Help Needed With DoS Attack

2007-07-15 Thread koffiejunkie
Aenn Seidhe Priest wrote: Hello, a webserver is under attack. What's required is some kind of filtering software and a firewall that could do the following: pass only valid HTTP GET requests and block all other HTTP methods (PUT, OPTIONS, CONNECT, etc.), possibly validate HTTP GET requests by

Help Needed With DoS Attack

2007-07-15 Thread Aenn Seidhe Priest
Hello, a webserver is under attack. What's required is some kind of filtering software and a firewall that could do the following: pass only valid HTTP GET requests and block all other HTTP methods (PUT, OPTIONS, CONNECT, etc.), possibly validate HTTP GET requests by matching to local paths; opt