You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Joost de Heer <sa...@xs4all.nl> on 2005/04/03 17:58:48 UTC
[users@httpd] Re: Is There A Way To Disable SEARCH?
> Is there a
> way I can set Apache to just ignore all SEARCH commands (all I really
> need is GET and POST)? Just trying to keep my logs from getting flooded
> with garbage data. Thanks.
<Limit SEARCH>
Order deny,allow
Deny from all
Allow from none
</Limit>
And possibly set an environment variable which can be used to avoid
logging, something like 'SetEnvIf Request_Method SEARCH NoSearchLogging',
and 'CustomLog file format env=!NoSearchLogging'
Joost
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Re: Is There A Way To Disable SEARCH?
Posted by Joshua Slive <js...@gmail.com>.
On Apr 3, 2005 11:58 AM, Joost de Heer <sa...@xs4all.nl> wrote:
> > Is there a
> > way I can set Apache to just ignore all SEARCH commands (all I really
> > need is GET and POST)? Just trying to keep my logs from getting flooded
> > with garbage data. Thanks.
>
> <Limit SEARCH>
> Order deny,allow
> Deny from all
> Allow from none
> </Limit>
Nope. For one thing, "Allow from none" is not proper syntax. This
will actually attempt to allow access to the hostname "none", causing
a DNS lookup on every request.
For another thing, these worm requests are rejected by apache very
early in request processing with a 414 (request too long) error, so
they will not be affected by this configuration.
My earlier mail gave a better solution.
Joshua.
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Re: Is There A Way To Disable SEARCH?
Posted by "David P. Donahue" <dd...@ccs.neu.edu>.
Awesome, thanks :)
Regards,
David P. Donahue
ddonahue@ccs.neu.edu
Joost de Heer wrote:
>>Is there a
>>way I can set Apache to just ignore all SEARCH commands (all I really
>>need is GET and POST)? Just trying to keep my logs from getting flooded
>>with garbage data. Thanks.
>
>
> <Limit SEARCH>
> Order deny,allow
> Deny from all
> Allow from none
> </Limit>
>
> And possibly set an environment variable which can be used to avoid
> logging, something like 'SetEnvIf Request_Method SEARCH NoSearchLogging',
> and 'CustomLog file format env=!NoSearchLogging'
>
> Joost
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org