Re: [Nolug] SEARCH requests filling apache logs

From: Michael Brunson <brunson_at_zipa.com>
Date: Fri, 07 May 2004 11:20:30 -0500
Message-ID: <0pdn9017kpip5ovivthfvqa8p8qqpbdvs4@4ax.com>

On Thu, 06 May 2004 21:43:41 -0500, Alex McKenzie <alex@boxchain.com> wrote:

| I'm sure you've heard about the latest IIS exploit to annoy us apache
| users...well it's filling my disk. Anybody have a good way to deal with
| this? I almost ran out of disk space on my little laptop server:
|
| # grep SEARCH access_log | wc
| 522 6273 13898170
|
| Discussed further at
| http://www.webmasterworld.com/forum39/2173.htm
| and
| http://www.webmasterworld.com/forum92/1315.htm
|
| Any ideas? All I seem to find on google are other cries for help :/

Try something like this in your conf file.
#----
SetEnvIf Request_URI SEARCH exploit-request
CustomLog /www/logs/access_log combined env=!exploit-request
#----

___________________
Nolug mailing list
nolug@nolug.org
Received on 05/07/04

This archive was generated by hypermail 2.2.0 : 12/19/08 EST