Difference between revisions of "HIDS 30113"

From Atomicorp Wiki
Jump to: navigation, search
(Created page with "'''Rule ID''' 30113 '''Status''' Active rule currently published '''Description''' This rule reports when Apache has completely rejected a connection from a client, and ...")

Revision as of 13:44, 16 December 2013

Rule ID

30113

Status

Active rule currently published


Description

This rule reports when Apache has completely rejected a connection from a client, and Apache has determined the method used is Invalid.

Disabling this rule will not prevent Apache from rejecting these invalid connections, this rule simply reports when Apache has rejected the connection.

Certain DOS attacks use this method to use up all file handles in use on the system.

False Positives

None. This rule simply reports when Apache has rejected the connection because it is using an invalid method.


Tuning Recommendations

None.

Personal tools