PDA

View Full Version : nimda hack for Apache server log filling

ducksfeet
10-29-2001, 02:01 PM
Place this in httpd.conf:


SetEnvIf Request_URI "winnt\/system32\/cmd.exe" dontlog
SetEnvIf Request_URI "winnt\/system32\/cmd32.exe" dontlog
SetEnvIf Request_URI "winnt\/system32" dontlog
SetEnvIf Request_URI "scripts\.\.\%" dontlog
SetEnvIf Request_URI "scripts\/" dontlog
#
CustomLog /usr/local/apache-1.3.19/logs/access_log common env=!dontlog

Replace paths as necesary.