Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Someone was trying to get cute with me, by "iframeing" my search result page via an IMG tag with 0 width and 0 height, in hopes of killing my server resources. My searches are cached, so it doesn't do much damage, since its just a static file being served, but I was wondering if there was anything I can do to "fight back"? I know you can use a frame breaker, had it been an iframe. Is there anything to do in the case of an image?

share|improve this question
up vote 1 down vote accepted

Try filtering on referrer. Either mod-rewrite or mod-security can be used. See Debain Administration site for examples.

share|improve this answer
    
And then do what with it? It wont always send a referrer either. – user11350 Jun 5 '10 at 4:48
    
If it's a hidden image, one could be reasonably sure the hits come from innocent third parties, and most of them send a referrer. Just filter / deny based on the specific domain or url misbehaving being present. – Wrikken Jun 5 '10 at 10:33
    
Is calling your search results page without a referrer a legitimate use case (for SEO reasons etc)? If not - block it. – rackandboneman Dec 14 '12 at 1:26

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.