Re: [cobalt-users] NIMDA Worm

[Tomas Garcia Ferrari <tgf@xxxxxxxxxxx>]

>> I've problems with the NIMDA-Worm and my Logfiles (Raq2), they got today a
>> very big file-size and my hdd get's nearly full. do you have ideas to stop
>> logging when the NIMDA-Worm ist trying to attack my server?

I think that you can do this (in the httpd.conf file):

SetEnvIf Request_URI "^.*\.[exe|dll|ida]" dontlog

Check in Apache (http://www.apache.org/) for "Conditional Logging".

Regards,
Tomás

P.S.: I didn't implemeted myself, but I'm thinking of... :)

+--                                         --+
       Tomás García Ferrari
       Bigital
       http://bigital.com/
+--                                         --+