nanog mailing list archives

Re: DNS Attacks

From: Valdis.Kletnieks () vt edu
Date: Sun, 19 Feb 2012 09:23:40 -0500

On Sun, 19 Feb 2012 13:02:01 +0100, Jeroen Massar said:

Per default most webservers (Apache, nginx, etc) won't log POST
variables, GET variables will be logged (as they are part of the query)
but those should not contain any PII.


Right. They shouldn't.  But the security mailing lists have lots of
counter-examples from clue-challenged web developers.. Plan your logging
strategy accordingly (is there any safe answer here other than "disable
logging" or "log only timestamp and source IP"?)

Attachment: _bin
Description:

Current thread:

Re: DNS Attacks Henry Linneweh (Feb 18)
- <Possible follow-ups>
- Re: DNS Attacks Joel M Snyder (Feb 18)
  - Re: DNS Attacks Robert Bonomi (Feb 18)
    - Re: DNS Attacks Ken Gilmour (Feb 19)
    - Re: DNS Attacks Patrick W. Gilmore (Feb 19)
    - Re: DNS Attacks Jeroen Massar (Feb 19)
    - Re: DNS Attacks Valdis . Kletnieks (Feb 19)
    - Re: DNS Attacks Robert Bonomi (Feb 19)
    - Re: DNS Attacks Ken Gilmour (Feb 19)
    - Re: DNS Attacks Tei (Feb 20)
    - Re: DNS Attacks Valdis . Kletnieks (Feb 20)
    - Re: DNS Attacks Christopher Morrow (Feb 20)
    - Re: DNS Attacks Christopher Morrow (Feb 20)
    - Re: DNS Attacks Joel jaeggli (Feb 20)
    - Re: DNS Attacks Christopher Morrow (Feb 21)
    - Re: DNS Attacks Jimmy Hess (Feb 21)
    - Re: DNS Attacks Valdis . Kletnieks (Feb 21)

(Thread continues...)