Welcome! Log In Create A New Profile

Advanced

Re: shellshock probing

April 02, 2015 07:21AM
Cole Tierney Wrote:
-------------------------------------------------------
> Or is there a better method to block these?

Not really better but good enough :)

map $http_referer $waffableref {
default 0;
~*\{.*\:\; 1;
}
map $http_user_agent $waffableua {
default 0;
~*\{.*\:\; 1;
}
map $waffableref$waffableua $waffable {
default 0;
~1 1;
}

# Block shellshock:
if ($waffable) { return 444; }

# Drop'm from logging:
map $waffable $loggable {
default 1;
~1 0;
}

access_log /path/to/access.log combined if=$loggable;

---
nginx for Windows http://nginx-win.ecsds.eu/
Subject Author Posted

2 maps for one 1 variable?

Cole Tierney April 01, 2015 03:08PM

Re: 2 maps for one 1 variable?

GreenGecko April 01, 2015 03:24PM

Re: 2 maps for one 1 variable?

Cole Tierney April 01, 2015 04:04PM

shellshock probing

Cole Tierney April 01, 2015 04:26PM

Re: shellshock probing

mex April 01, 2015 04:50PM

Re: shellshock probing

Cole Tierney April 01, 2015 05:08PM

Re: shellshock probing

mex April 01, 2015 05:17PM

Re: shellshock probing

itpp2012 April 02, 2015 07:21AM

Re: shellshock probing

Cole Tierney April 02, 2015 09:34AM

Re: shellshock probing

B.R. April 02, 2015 10:50AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 72
Record Number of Users: 6 on February 13, 2018
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready