Forum Discussion

ChadBigIP_14663's avatar
ChadBigIP_14663
Icon for Nimbostratus rankNimbostratus
Feb 01, 2013

"GET http://www.mmadsgadget.com/ - 302 Redirects in Apache Logs

Take a look at the below APACHE LOG:

 

142.4.127.130 - - [01/Feb/2013:02:22:31 -0500] "GET http://www.mmadsgadget.com/t?id=58f19df1-19aa-85e4-89f0-41dc9ffe2e4d&size=300x250 HTTP/1.0" 302 219 "http://www.adeentertainment.com/?p=143" "Mozilla/4.7 [en] (Win98; I)"

 

 

I get thousands and thousands of these every day.

 

Look at the initial GET

 

I tried this iRule to stop these requests and put mmadsgadget.com & adeentertainment.com

 

in the bad-domains DataGroup and it did nothing......

 

 

when HTTP_REQUEST {

 

if { [class match [HTTP::host] equals bad-domains] } {

 

reject

 

}

 

}

 

 

Since http://mmadsgadget.com is in the GET already, I think it is being overlooked by the iRule.

 

 

The initial GET should be from content on my web server.

 

 

These Apache Logs are all 302 Redirects.

 

 

I do not have an Open Proxy on Apache, I do not even have mod_proxy.so installed or in my httpd.conf

 

 

Any help with writing an iRule to DROP or REJECT these would be most helpful.

 

 

Thanks!

 

 

-Chad

 

 

16 Replies