On Fri, 31 Aug 2007, Eric Marden wrote:
> I've just started with a company running Coldfusion Apps on Windows.
> Too much code for me to audit quickly, but need some recommendations
> on something we can put at the network perimeter that will sniff
> incoming traffic only for weird patterns.... like if a guest book
> gets hit 100 times in 10 secs from the same IP it will just start to
> block....
>
> It shouldn't worry about outgoing, just incoming.
>
> Didn't think Snort was for this, or other IDS type systems.
> Commercial or Open Source (OS Preferred) will be considered. An
> Appliance if its Commercial. We need something quick and easy.
For the problem you specified above, you could take care of with an
iptables rule using the limit flag. If your looking for a quick fix to
provide some general web application protection, take a look at setting
up mod-security.
--
- Josh
-------------------------------------------------------------------------
Sponsored by: Watchfire
The Twelve Most Common Application-level Hack Attacks
Hackers continue to add billions to the cost of doing business online
despite security executives' efforts to prevent malicious attacks. This
whitepaper identifies the most common methods of attacks that we have seen,
and outlines a guideline for developing secure web applications.
Download today!
https://www.watchfire.com/securearea/whitepapers.aspx?id=701500000008rSe
--------------------------------------------------------------------------
Received on Sep 06 2007
Intro
