Anyone attacked by JaMaYcKa?

[ramprage]

My mod_security ruleset for managed clients covers these type of attacks.

 

[swampy]

Hi if anyone is running joomla or mambo this rule stopps most if not all attacks against mambo and joomla as far as i know joomla and mambo do not use this request in any url so i have added it to my modsec rules and it gets all of the attacks against my server about 300 aday from compromised scripts

SecFilter "mosConfig_"

hope this helps

swampy

 

[Adrnalnrsh]

anyone have a good rule or 2 to add to the mod_security config?

I use this one.

http://hostmerit.com/modsec.user.conf

 

[ramprage]

One of my servers got attacked through OpenSSL I think as it was running 0.9.7a and since cPanel reports it as the latest version I never thought to update it..

Updated to 0.9.8d now and cleared up the mess he made. Seems good now.

What OS are you using? Red Hat applies its own patches so the versions get fudged in between what openssl.org has listed.

 

[WireNine]

My mod_security ruleset for managed clients covers these type of attacks.

Where is your mod_security ruleset?