<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=utf-8" http-equiv=Content-Type>
<META name=qrichtext content=1>
<STYLE type=text/css>P {
WHITE-SPACE: pre-wrap
}
LI {
WHITE-SPACE: pre-wrap
}
</STYLE>
<META name=GENERATOR content="MSHTML 8.00.6001.19120"></HEAD>
<BODY
style="FONT-STYLE: normal; FONT-FAMILY: 'Arial'; FONT-SIZE: 12pt; FONT-WEIGHT: 400"
bgColor=#ffffff>
<DIV><FONT size=2>Thank you 'User Ernie' and Michael for spotting and fixing
this so quickly and thoroughly.</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>You'll probably already know your fix script worked
like a dream... it's also shaken me to get moving in the BX direction a bit
faster :o)</FONT></DIV>
<BLOCKQUOTE
style="BORDER-LEFT: #000000 2px solid; PADDING-LEFT: 5px; PADDING-RIGHT: 0px; MARGIN-LEFT: 5px; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="FONT: 10pt arial; BACKGROUND: #e4e4e4; font-color: black"><B>From:</B>
<A title=mstauber@blueonyx.it href="mailto:mstauber@blueonyx.it">Michael
Stauber</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=blueonyx@mail.blueonyx.it
href="mailto:blueonyx@mail.blueonyx.it">BlueOnyx General Mailing List</A>
</DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Thursday, August 25, 2011 6:47
AM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> [BlueOnyx:08240] Re: Apache DoS
exploit kit</DIV>
<DIV><BR></DIV>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">Hi
all,</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"><BR></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">>
> I just noticed that Apache are warning about a DoS exploit tool
that's</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">>
> curculating around the Internet:</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">>
> </P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">>
> <A
href="http://www.computerworld.com/s/article/9219471/Apache_warns_Web_server_ad">http://www.computerworld.com/s/article/9219471/Apache_warns_Web_server_ad</A></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">>
> mi ns_of_DoS_attack_tool</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">>
> </P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">>
> Is the Apache on BlueOnyx vunerable?</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"><BR></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">I
took the opportunity to sum up the findings and the possible fixes for
BlueQuartz in a news posting on www.blueonyx.it:</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"><BR></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">http://www.blueonyx.it/index.php?mact=News,cntnt01,detail,0&cntnt01articleid=95&cntnt01origid=15&cntnt01pagelimit=4&cntnt01returnid=54</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"><BR></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">Please
note: The rewrite condition and rewrite rules on the news page (and the
published script to fix the issues) are slightly different than in my initial
posting here with the ID [BlueOnyx:08235]. The newer rewrite syntax is taken
right out of the Apache advisory and should work better.</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"><BR></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">--
</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">With
best regards</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"><BR></P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0">Michael
Stauber</P>
<P
style="TEXT-INDENT: 0px; MARGIN: 0px; -qt-block-indent: 0; -qt-user-state: 0; -qt-paragraph-type: empty"><BR></P>
<P>
<HR>
<P></P>_______________________________________________<BR>Blueonyx mailing
list<BR>Blueonyx@mail.blueonyx.it<BR>http://mail.blueonyx.it/mailman/listinfo/blueonyx<BR></BLOCKQUOTE></BODY></HTML>