[users@httpd] Denying access for a complicated bugger address

2014-09-30 Thread Hans-Georg Scherneck
Hi, I'm new to this, and I'm no specialist in Apache, sorry. My site is bombarded by POST requests from a site identifying itself like 123.123.123.123.word.word.word.word A deny from instruction with a string trying to match this in .htaccess does not appear to work (though other abusers with

Re: [users@httpd] Denying access for a complicated bugger address

2014-09-30 Thread Frederik Nosi
Blocking from apache: Location / Order Allow,Deny Deny from INSERT IP TO BLOCK HERE /Location You can block it at the network stack level too, this way apache does not even see the request, ex on linux using iptables. bye, Frederik On 09/30/2014 07:16 PM, Hans-Georg Scherneck

Re: [users@httpd] Denying access for a complicated bugger address

2014-09-30 Thread Rainer M. Canavan
On Sep 30, 2014, at 19:16 , Hans-Georg Scherneck h...@chalmers.se wrote: My site is bombarded by POST requests from a site identifying itself like 123.123.123.123.word.word.word.word A deny from instruction with a string trying to match this in .htaccess does not appear to work (though

Re: [users@httpd] Denying access for a complicated bugger address

2014-09-30 Thread Hans-Georg Scherneck
Rainer M. Canavan wrote: On Sep 30, 2014, at 19:16 , Hans-Georg Scherneck h...@chalmers.se wrote: My site is bombarded by POST requests from a site identifying itself like 123.123.123.123.word.word.word.word A deny from instruction with a string trying to match this in .htaccess does not

Re: [users@httpd] Denying access for a complicated bugger address

2014-09-30 Thread Frederik Nosi
Hi Hans-Georg, On 09/30/2014 08:26 PM, Hans-Georg Scherneck wrote: Rainer M. Canavan wrote: On Sep 30, 2014, at 19:16 , Hans-Georg Scherneck h...@chalmers.se wrote: My site is bombarded by POST requests from a site identifying itself like 123.123.123.123.word.word.word.word A deny from

Re: [users@httpd] Denying access for a complicated bugger address

2014-09-30 Thread Hans-Georg Scherneck
Frederik Nosi wrote: Hi Hans-Georg, On 09/30/2014 08:26 PM, Hans-Georg Scherneck wrote: Rainer M. Canavan wrote: On Sep 30, 2014, at 19:16 , Hans-Georg Scherneck h...@chalmers.se wrote: My site is bombarded by POST requests from a site identifying itself like

Re: [users@httpd] Denying access for a complicated bugger address

2014-09-30 Thread Eric Covener
On Tue, Sep 30, 2014 at 2:55 PM, Hans-Georg Scherneck h...@chalmers.se wrote: It rather seems the issue is for the Apache developers to solve, e.g. to extend the scope of the Deny string match. Should be simple. It's not clear what you're trying to match. A string in the request body? Maybe

Re: [users@httpd] Denying access for a complicated bugger address

2014-09-30 Thread Frederik Nosi
On 09/30/2014 08:55 PM, Hans-Georg Scherneck wrote: Frederik Nosi wrote: Hi Hans-Georg, On 09/30/2014 08:26 PM, Hans-Georg Scherneck wrote: Rainer M. Canavan wrote: On Sep 30, 2014, at 19:16 , Hans-Georg Scherneck h...@chalmers.se wrote: My site is bombarded by POST requests from a site

Re: [users@httpd] Denying access for a complicated bugger address

2014-09-30 Thread Oscar Knorn
Hi Hans-Georg, i guess, you will have to alter the Code of the form. 1. check for the referer URI in the action=* script. 2. establish a session in the form and check for the sessionid in the action script. 3. use javascript to write additional hidden fields into the form and check for their

Re: [users@httpd] Denying access for a complicated bugger address

2014-09-30 Thread Nick Kew
On 30 Sep 2014, at 18:16, Hans-Georg Scherneck wrote: a site identifying itself like 123.123.123.123.word.word.word.word What do you mean by identifying itself like? Requests don't come from a site. The information you have about where they do come from is usually no more than an IP

Re: [users@httpd] Denying access for a complicated bugger address

2014-09-30 Thread Hans-Georg Scherneck
Thanks Oscar, that makes a lot of sense. I'll try to realize your suggestion. Case closed, thanks everyone, you've all helped to clear things up for me the newbie /Hans-Georg Oscar Knorn wrote: Hi Hans-Georg, i guess, you will have to alter the Code of the form. 1. check for the referer URI