HIDS 60817

Rule ID

60817

Status

Active rule currently published

Description

This rule reports when Apache has rejected a connection from a client because the method is not implemented. ASL does not cause this, this is simply a reporting rule, and disabling this rule will not prevent Apache from rejecting these connections.

This rule does not shun the offending the IP by default.

Certain DOS attacks use this method.

False Positives

None. This rule simply reports when Apache has rejected the connection because it is using an invalid method.

Tuning Recommendations

None.