Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Someone was trying to get cute with me, by "iframeing" my search result page via an IMG tag with 0 width and 0 height, in hopes of killing my server resources. My searches are cached, so it doesn't do much damage, since its just a static file being served, but I was wondering if there was anything I can do to "fight back"? I know you can use a frame breaker, had it been an iframe. Is there anything to do in the case of an image?

share|improve this question

1 Answer 1

up vote 1 down vote accepted

Try filtering on referrer. Either mod-rewrite or mod-security can be used. See Debain Administration site for examples.

share|improve this answer
    
And then do what with it? It wont always send a referrer either. –  user11350 Jun 5 '10 at 4:48
    
If it's a hidden image, one could be reasonably sure the hits come from innocent third parties, and most of them send a referrer. Just filter / deny based on the specific domain or url misbehaving being present. –  Wrikken Jun 5 '10 at 10:33
    
Is calling your search results page without a referrer a legitimate use case (for SEO reasons etc)? If not - block it. –  rackandboneman Dec 14 '12 at 1:26

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.