Forum Discussion
mraful_64014
Nimbostratus
NimbostratusI need opinions on how to handle rejects
I have written an irule to reject certain URI requests. As of now, the user would receive a simple 404 error, HTTP::respond 404. However, I don't want a poential hacker aware that something exists ...
Hi mraful,
This is a great place to use a honeypot. If you know the approximate rate of requests a normal user would make to a virtual, you can set an upper bound of 10x the normal usage. If that user exceeds that threshold, then throw that user into a separate pool that goes nowhere. The table command (http://devcentral.f5.com/wiki/iRules.table.ashx) is great for counting things and expiring those counters after a certain period of time. Hope this helps,
George