[BlueOnyx:02287] Re: DFix update

[Darrell D. Mobley]

> -----Original Message-----
> From: blueonyx-bounces at blueonyx.it [mailto:blueonyx-bounces at blueonyx.it]
> On Behalf Of Greg Kuhnert
> Sent: Monday, August 31, 2009 5:26 PM
> To: 'BlueOnyx General Mailing List'
> Subject: [BlueOnyx:02286] Re: DFix update
> 
> If you want to make dfix less sensitive, You need to do one or both of
> the items below:
> 1. Decrease HTTPRECS and/or
> 2. Increase the BADHITS threshold.
> 
> DFIX only triggers when it finds BADHITS entries in HTTPRECS entries in
> the apache log file. Doing the above two things will decrease the
> sensitivity.
> 
> To totally turn off the HTTP log, set HTTPRECS to be lower than BADHITS.
> 
> To discuss your specific problems, contact me off-list. When resolved, I
> will post the final solution here for the benefit of others.

The block/unblock is being caused by the new error_log routine.  I don't why
it repeatedly blocks and unblocks the IP, but if I set ERECS equal to
ERRORHITS, it stops, which I imagine pretty much neuters that part of the
script.  I sent you an email offlist, hopefully we can get it worked out.