Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

how can you prevent that scripts can parese the server for paths and dirs?

from error.log in Apache:

[Thu Jul 07 11:28:13 2011] [error] [client 91.121.134.32] File does not exist: /var/www/scripts
[Thu Jul 07 11:28:13 2011] [error] [client 91.121.134.32] File does not exist: /var/www/admin
[Thu Jul 07 11:28:13 2011] [error] [client 91.121.134.32] File does not exist: /var/www/admin
[Thu Jul 07 11:28:13 2011] [error] [client 91.121.134.32] File does not exist: /var/www/admin
[Thu Jul 07 11:28:13 2011] [error] [client 91.121.134.32] File does not exist: /var/www/db
[Thu Jul 07 11:28:13 2011] [error] [client 91.121.134.32] File does not exist: /var/www/dbadmin
[Thu Jul 07 11:28:13 2011] [error] [client 91.121.134.32] File does not exist: /var/www/myadmin
[Thu Jul 07 11:28:13 2011] [error] [client 91.121.134.32] File does not exist: /var/www/mysql
[Thu Jul 07 11:28:13 2011] [error] [client 91.121.134.32] File does not exist: /var/www/mysqladmin
[Thu Jul 07 11:28:14 2011] [error] [client 91.121.134.32] File does not exist: /var/www/typo3
[Thu Jul 07 11:28:14 2011] [error] [client 91.121.134.32] File does not exist: /var/www/phpadmin
[Thu Jul 07 11:28:15 2011] [error] [client 91.121.134.32] File does not exist: /var/www/phpMyAdmin
[Thu Jul 07 11:28:15 2011] [error] [client 91.121.134.32] File does not exist: /usr/share/phpmyadmin/scripts
[Thu Jul 07 11:28:15 2011] [error] [client 91.121.134.32] File does not exist: /var/www/phpmyadmin1
[Thu Jul 07 11:28:15 2011] [error] [client 91.121.134.32] File does not exist: /var/www/phpmyadmin2
[Thu Jul 07 11:28:15 2011] [error] [client 91.121.134.32] File does not exist: /var/www/pma
[Thu Jul 07 11:28:15 2011] [error] [client 91.121.134.32] File does not exist: /var/www/web
[Thu Jul 07 11:28:15 2011] [error] [client 91.121.134.32] File does not exist: /var/www/xampp
[Thu Jul 07 11:28:18 2011] [error] [client 91.121.134.32] File does not exist: /var/www/php-my-admin
[Thu Jul 07 11:28:18 2011] [error] [client 91.121.134.32] File does not exist: /var/www/websql
[Thu Jul 07 11:28:18 2011] [error] [client 91.121.134.32] File does not exist: /usr/share/phpmyadmin/scripts
[Thu Jul 07 11:28:18 2011] [error] [client 91.121.134.32] File does not exist: /var/www/phpMyAdmin
share|improve this question
add comment

2 Answers 2

If your host is linux and you can install software then try fail2ban or denyhosts. Both should be available in your distibution's repos.

share|improve this answer
add comment

I would look at mod_security, or you could write your own custom access rules

share|improve this answer
    
how could you write access rules on this subject? –  clarkk Jul 7 '11 at 15:18
    
At a very basic level, if your website did not use php / support any files with a .php extension you could have a rewrite rule for that. –  jamespo Jul 7 '11 at 15:33
    
but how can you make a rewrite rule which looks at hosts who get alot of "file not found" errors? –  clarkk Jul 7 '11 at 16:00
    
could you give an example? –  clarkk Jul 10 '11 at 10:33
    
or how can you rewrite all 404 to an error page... eg error.php –  clarkk Jul 10 '11 at 10:40
show 2 more comments

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.