using host.allow on dynamic addresses

Alfonso Romero ibac at prodigy.net.mx
Wed Apr 30 21:52:03 PDT 2003


I´ve been receiving some of this lines on my apache access log:

200.67.17.221 - - [28/Apr/2003:17:46:05 -0500] "GET
/default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%
u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a
HTTP/1.0" 404 286 "-" "-"

>From what I´ve read, I can put on hosts.allow these addresses to avoid this
type of problem, but what if some of those addresses are dynamic? If one
user has an infected PC with a dialup access to Internet, and then hangs up
and another user receives this same address, even if his PC isn´t infected,
he couldn´t visit my site, right?





More information about the freebsd-questions mailing list