"GET http://www.mmadsgadget.com/ - 302 Redirects in Apache Logs
Take a look at the below APACHE LOG:
142.4.127.130 - - [01/Feb/2013:02:22:31 -0500] "GET http://www.mmadsgadget.com/t?id=58f19df1-19aa-85e4-89f0-41dc9ffe2e4d&size=300x250 HTTP/1.0" 302 219 "http://www.adeentertainment.com/?p=143" "Mozilla/4.7 [en] (Win98; I)"
I get thousands and thousands of these every day.
Look at the initial GET
I tried this iRule to stop these requests and put mmadsgadget.com & adeentertainment.com
in the bad-domains DataGroup and it did nothing......
when HTTP_REQUEST {
if { [class match [HTTP::host] equals bad-domains] } {
reject
}
}
Since http://mmadsgadget.com is in the GET already, I think it is being overlooked by the iRule.
The initial GET should be from content on my web server.
These Apache Logs are all 302 Redirects.
I do not have an Open Proxy on Apache, I do not even have mod_proxy.so installed or in my httpd.conf
Any help with writing an iRule to DROP or REJECT these would be most helpful.
Thanks!
-Chad