535 reputation
710
bio website slacy.com/blog
location Mountain View, AR
age 42
visits member for 5 years, 4 months
seen Dec 27 '13 at 0:54

Oct
27
comment Equivalent to denyhosts, but for HTTP requests?
@DavidSchwartz Yeah, I double checked that what looks like a success (200) is actually an error page. I didn't hand out /etc/passwd. :)
Jun
24
comment Best system for managing ssh keys?
Wow, great solution, thanks! I love the universal config in ~/.ssh/config
Jun
5
comment Equivalent to denyhosts, but for HTTP requests?
Yes, that looks pretty good. Thanks!
Jun
5
comment Equivalent to denyhosts, but for HTTP requests?
Yes, that's how to deny access, but I'm looking for something that detects bad behavior based on URL access patterns, and then denies specific IP addresses (or ranges) based on that.
Jun
5
comment Equivalent to denyhosts, but for HTTP requests?
See also denyhosts.sourceforge.net
Jun
5
comment Equivalent to denyhosts, but for HTTP requests?
And no, I don't have a PNphpBB installation, and I've checked that these aren't legitimate security holes in my server.
Jun
5
comment Equivalent to denyhosts, but for HTTP requests?
Yes, it looks like mod_acess would allow me to manually deny access to these users, but I'm looking for something that automatically bans any IP address that's attempting to request a URL that matches a given set of regexps. In other words, if the URL matches ".*/etc/passwd.*" then permanently (and immediately) ban the requester. I guess I could create some manual URL rules for this myself and try them out, but I was hoping for something well maintained...
Jun
3
comment Poll: What is your favourite terminal program?
Yeah, I know it's not really a terminal program, but hey, it doesn't really matter if you use rxvt, gnome-terminal, konsole, xterm, etc. Inside, you've always got screen, and that's what matters. For all intents and purposes, it is my terminal.
May
28
comment Best system for managing ssh keys?
Yeah, renamed to a proper "Option 2" I like the rule of "never copy a private key." That's a good rule.