mod_evasive im Livebetrieb

B

BrianFFM

New Member
Ich habe nun seit einigen Tagen mod_evasive auf einem meiner Live Server, auf denen einen große community läuft. Das ganze funktioniert recht gut. Es haben sich jedoch einige Probleme Ergeben.

zunächst zum Verständniss:

DOSPageCount und DOSPageInterval spielen zusammen genau so wie

DOSSiteCount und DOSSiteInterval

wird DOSPageCount innerhalb DOSPageInterval erreicht, dann sperrt das modul. und genau da liegt mein Problem.

In der Theorie, ruft keiner mit guten Absichten eine Seite mehr als 2 mal in einer Sekunde auf. also sollte

DOSPageCount 2
DOSPageInterval 1

durchaus OK sein. ist aber nicht so. Ich habe mittlerweile

DOSPageCount 30
DOSPageInterval 1

und trotzdem landen immer wieder normale Member auf der Blacklist. Ich habe Analysiert was da passiert.

Zb werden gif's (die geschlechter zeichen) auf der Seite mehrfach angezeigt. In der Online Liste werden bei 500 online Usern diese Bilder also auch 500 mal angezeigt.

Normal wird das bild von Browser nur ein mal geladen. und dann überall da angezeigt wo es eingebunden ist. Bei manchen Benutzern (meust mit IE6) werden die bilder aber hundere mal geladen. dann gehts auf die Blacklist

Code: 
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderM0.gif HTTP/1.1" 200 608 "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.
0.50727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC1.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.
50727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderF1.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.
50727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderT1.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.
50727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/check-lo.png HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.
50727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/check.png HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.507
27)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/check.png HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.507
27)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/check.png HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.507
27)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderF.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderF.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/check.png HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.507
27)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/check.png HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.507
27)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/check.png HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.507
27)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/check.png HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.507
27)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/check.png HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.507
27)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderT.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/check.png HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.507
27)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/check.png HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.507
27)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderF.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderF.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/check.png HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.507
27)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/check.png HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.507
27)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderF.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/check.png HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.507
27)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 304 - "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 403 239 "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0
.50727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 403 239 "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0
.50727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 403 239 "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0
.50727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 403 239 "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0
.50727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 403 239 "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0
.50727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 403 239 "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0
.50727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 403 239 "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0
.50727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/genderC.gif HTTP/1.1" 403 239 "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0
.50727)"
xx.xx.xx.xx - - [06/Jun/2009:10:31:41 +0200] "GET /pfad/check.png HTTP/1.1" 403 237 "http://www.domain.de/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.5
0727)"

das ist doch nicht im Sinne des Erfinder :) ..

gibt es eine möglichkeit zB .jpg und .gif vom count aus zu schließen oder eine andere Möglichkeit??

liebe Grüße, Brian
 
Zum Einen könnte man versuchen den Bildern, CSS- und JS-Files einen Expire-Header zu verpassen. Damit könnte auch der IE6 seine Ladezeit vermindern.

Eine Whitelist für einzelne URLs gibt es in mod_evasive nicht. Könnte man aber programmieren.

huschi.
 
You must log in or register to reply here.
Back
Top