WebApp Sec mailing list archives
Re: Anti-DDoS Appliance with a focus on Web Code Exploits (Comment Spam, and the like)
From: ggwin () cafesoft com
Date: Thu, 6 Sep 2007 12:31:26 -0400 (EDT)
Eric, You might take a look at products like linkdeny or servermask form www.port80software.com, which are designed for IIS. Gary -----Original Message----- From: Eric Marden <security () xentek net> Sent: Wed, September 5, 2007 3:15 pm To: webappsec () securityfocus com Subject: Re: Anti-DDoS Appliance with a focus on Web Code Exploits (Comment Spam, and the like) Thanks for the recommendations and keep them coming. But keep in mind. Their infrastructure is Win 2003 + CF + IIS. So modsecuirty and to a point iptables may not be ideal solutions. However, this could change as long as the disruption to their core business is minimal. -= Eric Marden =- http://www.linkedin.com/in/xentek On Sep 5, 2007, at 3:13 PM, Josh Amishav-Zlatin wrote:
On Fri, 31 Aug 2007, Eric Marden wrote:I've just started with a company running Coldfusion Apps on Windows. Too much code for me to audit quickly, but need some recommendations on something we can put at the network perimeter that will sniff incoming traffic only for weird patterns.... like if a guest book gets hit 100 times in 10 secs from the same IP it will just start to block.... It shouldn't worry about outgoing, just incoming. Didn't think Snort was for this, or other IDS type systems. Commercial or Open Source (OS Preferred) will be considered. An Appliance if its Commercial. We need something quick and easy.For the problem you specified above, you could take care of with an iptables rule using the limit flag. If your looking for a quick fix to provide some general web application protection, take a look at setting up mod-security. -- - Josh
------------------------------------------------------------------------- Sponsored by: Watchfire The Twelve Most Common Application-level Hack Attacks Hackers continue to add billions to the cost of doing business online despite security executives' efforts to prevent malicious attacks. This whitepaper identifies the most common methods of attacks that we have seen, and outlines a guideline for developing secure web applications. Download today! https://www.watchfire.com/securearea/whitepapers.aspx?id=701500000008rSe -------------------------------------------------------------------------- ------------------------------------------------------------------------- Sponsored by: Watchfire The Twelve Most Common Application-level Hack Attacks Hackers continue to add billions to the cost of doing business online despite security executives' efforts to prevent malicious attacks. This whitepaper identifies the most common methods of attacks that we have seen, and outlines a guideline for developing secure web applications. Download today! https://www.watchfire.com/securearea/whitepapers.aspx?id=701500000008rSe --------------------------------------------------------------------------
Current thread:
- Anti-DDoS Appliance with a focus on Web Code Exploits (Comment Spam, and the like) Eric Marden (Sep 05)
- Re: Anti-DDoS Appliance with a focus on Web Code Exploits (Comment Spam, and the like) Josh Amishav-Zlatin (Sep 06)
- Re: Anti-DDoS Appliance with a focus on Web Code Exploits (Comment Spam, and the like) Thrynn (Sep 06)
- Re: Anti-DDoS Appliance with a focus on Web Code Exploits (Comment Spam, and the like) Ian (Sep 06)
- <Possible follow-ups>
- Re: Anti-DDoS Appliance with a focus on Web Code Exploits (Comment Spam, and the like) ggwin (Sep 06)
- FW: Anti-DDoS Appliance with a focus on Web Code Exploits (Comment Spam, and the like) Brokken, Allen P. (Sep 18)