Block McAfee IP addresses from logging errors

[AlanW]

We need to block McAfee IP addresses from logging errors. When McAfee scans the site the error log file quickly grows to thousands of error messages until finally the database gets full and the site goes down. We've configured the McAfee scan to exclude a range of pages with wildcard characters for categories/ products but the problem is still occuring.

We need to exclude the list of McAfee servers from logging error. Any ideas?

--Alan Wills

[mazhar]

some related thread may be they help
viewtopic.php?f=42&t=7901
viewtopic.php?f=42&t=7762

[Logan Rhodehamel]

McAfee purposely submits invalid data to various fields as part of the scan. Our application was logging an error when unexpected data was present in certain fields, but this error was not helpful in conjunction with automated site scans. This has been corrected as part of the 7.0.3 release.

[AlanW]

I changed web.config as follows

Code: Select all

 <system.web>
    <customErrors mode="On"/>
    <pages theme="AbleCommerce" enableEventValidation="false" validateRequest="false">

to

Code: Select all

<system.web>
    <customErrors mode="On"/>
    <pages theme="AbleCommerce" enableEventValidation="false" validateRequest="true">

and added validateRequest="false" to the Admin/web.config

Is that an acceptable work around until we can apply 7.0.3 ?

Thanks,
Alan