Mantis - Resin
Viewing Issue Advanced Details
4133 minor always 07-21-10 08:39 07-22-11 15:40
ferg  
ferg  
normal  
closed 4.0.8  
fixed  
none    
none 4.0.21  
0004133: disabling a poisoned IP address
(rep by Aaron Freeman)

Just wondering if anybody has ever worked through a scenario where you
could automatically firewall off an IP address that requested a
"poisoned" URL?

There is an attacker continuously scanning all of our servers for a
specific URL, but from several different IPs. It would be nice to be
able to automatically firewall them off.

Has anybody done anything like that before?


Notes
(0005393)
ferg   
07-22-11 15:40   
server/1893