redirectMatch not working? 1

[Tracey]

Hi

ages and ages ago i got some advise on how to block worm virus traffic

I have the following in my httpd.conf:

redirect /scripts [URL unfurl="true"]http://www.stoptheviruscold.invalid[/URL]
redirect /MSADC [URL unfurl="true"]http://www.stoptheviruscold.invalid[/URL]
redirect /c [URL unfurl="true"]http://www.stoptheviruscold.invalid[/URL]
redirect /d [URL unfurl="true"]http://www.stoptheviruscold.invalid[/URL]
redirect /_mem_bin [URL unfurl="true"]http://stoptheviruscold.invalid[/URL]
redirect /msadc [URL unfurl="true"]http://stoptheviruscold.invalid[/URL]
redirect /_vti_bin [URL unfurl="true"]http://stoptheviruscold.invalid[/URL]
RedirectMatch (.*)\cmd.exe [URL unfurl="true"]http://stoptheviruscold.invalid$1[/URL]
RedirectMatch (.*)\root.exe [URL unfurl="true"]http://stoptheviruscold.invalid$1[/URL]
RedirectMatch (.*)\default.ida [URL unfurl="true"]http://stoptheviruscold.invalid$1[/URL]

while the number of wormy hits using up my bandwidth has reduced considerable since adding that to my config file, the problem is that the last line doesnt seem to work, i am still getting a dozen or so hits like:

187.166.17.210.dyn.pacific.net.hk - - [01/Aug/2003:02:51:00 +1200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0" 404 772
210.183.70.31 - - [01/Aug/2003:05:14:33 +1200] "GET /default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a  HTTP/1.0" 404 772

giving errors of:

[Thu Aug 07 08:27:38 2003] [error] [client 210.108.147.228] File does not exist: C:/Apache/htdocs/default.ida

Remember... True happiness is not getting what you want...

Its wanting what you have got!

 

[Tracey]

Hmmm, second complaint is the submit button is too close to the preview post button (lol)

anyway, is there anyone who can tell me why this ONE line is not doing its job?

cheers in advance

Tracey

Remember... True happiness is not getting what you want...

Its wanting what you have got!

 

[danielhozac]

Try changing it to
[tt]RedirectMatch (.*)default.ida(.*)

http://stoptheviruscold.invalid

[/tt]

//Daniel

 

[Tracey]

Cheers Daniel, that seems to be working now

[cheers'
tracey

Remember... True happiness is not getting what you want...

Its wanting what you have got!