[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
DNS Attacks
On Sun, 19 Feb 2012 13:02:01 +0100, Jeroen Massar said:
> Per default most webservers (Apache, nginx, etc) won't log POST
> variables, GET variables will be logged (as they are part of the query)
> but those should not contain any PII.
Right. They shouldn't. But the security mailing lists have lots of
counter-examples from clue-challenged web developers.. Plan your logging
strategy accordingly (is there any safe answer here other than "disable
logging" or "log only timestamp and source IP"?)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 865 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20120219/5a686cab/attachment.bin>
- References:
- DNS Attacks
- From: Joel.Snyder at Opus1.COM (Joel M Snyder)
- DNS Attacks
- From: bonomi at mail.r-bonomi.com (Robert Bonomi)
- DNS Attacks
- From: ken.gilmour at gmail.com (Ken Gilmour)
- DNS Attacks
- From: patrick at ianai.net (Patrick W. Gilmore)
- DNS Attacks
- From: jeroen at unfix.org (Jeroen Massar)