On Tue, Aug 10, 2004 at 11:22:47PM -0500, Tom Marble wrote:
> This looked like fun so I modified your matching somewhat
> (avoided full regexp's)... I have lots of examples in my logs
> to choose from...:
> 
>     # redirect M$ IIS probes
>     RedirectMatch permanent ^/default.ida http://www.microsoft.com/
>     RedirectMatch permanent ^/_vti_bin    http://www.microsoft.com/
>     RedirectMatch permanent ^/_mem_bin    http://www.microsoft.com/
>     RedirectMatch permanent ^/scripts     http://www.microsoft.com/
>     RedirectMatch permanent ^/msadc       http://www.microsoft.com/
>     RedirectMatch permanent ^/MSADC       http://www.microsoft.com/
>     RedirectMatch permanent ^/\x90        http://www.microsoft.com/
>     # send them to bill
>     # RedirectMatch permanent \.exe       http://www.microsoft.com/
>     # send their message to bill
>     RedirectMatch permanent (.*\.exe.*)   http://www.microsoft.com$1
> 
> So all this really accomplishes is it gives them a 301 instead of a 302...
> You still get cruft in your logs.

I'm sure those worms will all dutifully respect the 30x redirect and
head straight to MS.  :-)

-- 
trammell at el-swifto.com  9EC7 BC6D E688 A184 9F58  FD4C 2C12 CC14 8ABA 36F5
Twin Cities Linux Users Group (TCLUG)      Minneapolis/St. Paul, Minnesota

_______________________________________________
TCLUG Mailing List - Minneapolis/St. Paul, Minnesota
Help beta test TCLUG's potential new home: http://plone.mn-linux.org
Got pictures for TCLUG? Beta test http://plone.mn-linux.org/gallery
tclug-list at mn-linux.org
https://mailman.real-time.com/mailman/listinfo/tclug-list