PDA

View Full Version : SOS! How to lock out a certain domain? (because of Hacker-Attack)



coldtobi
January 31st, 2001, 05:49
In the last time i get hundres of hits during a very small period of time, and everytime from the same domain:

xxx.proxy.anonymizer.com

Seems to be a attack???

If they go on, they will probably kick me from my provider, because of the bandwith.

So my questiom: Is there a server-bbandwith-friendly way of locking them out (something like an entry in .htaccess?)

Thank you for your help

coldtobi

Cagey
January 31st, 2001, 16:49
Why not notify your provider and ask them for assistance?

Hobbes
January 31st, 2001, 18:46
Here's a suggestion if you REALLY want to block that domain.

Get the IP address of whatever server he's coming in on...

Add this line into your htaccess file

deny from ###.###.###.

(replace ### with whatever his IP numbers are) and it should work.. I've done it on the matrixchat server, and it's worked...

coldtobi
February 1st, 2001, 12:17
Okay, its works fine... Thank you a lot

But I am not complety satisfied. So my next question
My .hatccess now looks like

ErrorDocument 403 /cgibin/.../error.cgi?403
ErrorDocument 404 /cgibin/.../error.cgi?404
ErrorDocument 500 /cgibin/.../error.cgi?500

deny from ???.???.???.???
deny .....


Okay so far so good. Now I further want to track the
.htaccess generated 403-errors (forbidden). So I have to exclude the file "/cgibin/.../error.cgi" from the "deny" rule.

But how?

Thank you for help

coldtobi