[geeklog-devtalk] geeklog-devel digest, Vol 1 #472 - 1 msg

[geeklog-devel-request at lists.geeklog.net]

Send geeklog-devel mailing list submissions to
	geeklog-devel at lists.geeklog.net

To subscribe or unsubscribe via the World Wide Web, visit
	http://lists.geeklog.net/listinfo/geeklog-devel
or, via email, send a message with subject or body 'help' to
	geeklog-devel-request at lists.geeklog.net

You can reach the person managing the list at
	geeklog-devel-admin at lists.geeklog.net

When replying, please edit your Subject line so it is more specific
than "Re: Contents of geeklog-devel digest..."


Today's Topics:

   1. New Santy worm and impact on Geeklog sites (Dirk Haun)

--__--__--

Message: 1
From: "Dirk Haun" <dirk at haun-online.de>
To: <geeklog-devel at lists.geeklog.net>
Date: Thu, 30 Dec 2004 10:00:11 +0100
Organization: Terra Software Systems
Subject: [geeklog-devel] New Santy worm and impact on Geeklog sites
Reply-To: geeklog-devel at lists.geeklog.net

As Tom pointed out in this thread: <http://www.geeklog.net/forum/
viewtopic.php?showtopic=45173>, geeklog.net has been going slow for the
last few days.

A quick peek at the logfile seems to point at that new variant of the
Santy worm as the culprit. Yesterday's logfile has more than twice the
amount of requests than on a normal day.

If you can, do a "tail -f access_log" on your server, sit back and enjoy
the show. It's amazing.

Here's a tip from my web hoster's support forum:

RewriteEngine On 
RewriteCond %{QUERY_STRING} ^(.*)wget\%20 [OR] 
RewriteCond %{QUERY_STRING} ^(.*)echr(.*) [OR] 
RewriteCond %{QUERY_STRING} ^(.*)esystem(.*) [OR] 
RewriteCond %{QUERY_STRING} ^(.*)highlight=\%2527 [OR] 
RewriteCond %{HTTP_COOKIE}% s:(.*):\%22test1\%22\%3b 
RewriteRule ^.*$ http://127.0.0.1/ [L,R=301]

I'm using that on geeklog.net now. We'll see if it helps ...

bye, Dirk


-- 
http://www.haun-online.de/
http://www.macosx-faq.de/



--__--__--

_______________________________________________
geeklog-devel mailing list
geeklog-devel at lists.geeklog.net
http://lists.geeklog.net/listinfo/geeklog-devel


End of geeklog-devel Digest