Page 1 of 1
Block McAfee IP addresses from logging errors
Posted: Mon Jun 01, 2009 9:08 am
by AlanW
We need to block McAfee IP addresses from logging errors. When McAfee scans the site the error log file quickly grows to thousands of error messages until finally the database gets full and the site goes down. We've configured the McAfee scan to exclude a range of pages with wildcard characters for categories/ products but the problem is still occuring.
We need to exclude the list of McAfee servers from logging error. Any ideas?
--Alan Wills
Re: Block McAfee IP addresses from logging errors
Posted: Wed Jun 03, 2009 9:38 am
by mazhar
Re: Block McAfee IP addresses from logging errors
Posted: Wed Jun 03, 2009 10:26 am
by Logan Rhodehamel
McAfee purposely submits invalid data to various fields as part of the scan. Our application was logging an error when unexpected data was present in certain fields, but this error was not helpful in conjunction with automated site scans. This has been corrected as part of the 7.0.3 release.
Re: Block McAfee IP addresses from logging errors
Posted: Wed Jun 03, 2009 12:44 pm
by AlanW
I changed web.config as follows
Code: Select all
<system.web>
<customErrors mode="On"/>
<pages theme="AbleCommerce" enableEventValidation="false" validateRequest="false">
to
Code: Select all
<system.web>
<customErrors mode="On"/>
<pages theme="AbleCommerce" enableEventValidation="false" validateRequest="true">
and added validateRequest="false" to the Admin/web.config
Is that an acceptable work around until we can apply 7.0.3 ?
Thanks,
Alan