Using Iptables To Block Bot Scans

I get the occasional bot scan searching for PMA, etc.. Fairly routine and harmless if you don't use PhpMyAdmin. It takes up log space though and is unnecessary work for the server. Redirecting and telling Apache not to log the hit was an option, but I really wanted to stop the scan before it reached the web server.

The string-match module for iptables can do just that. Each hit in the log from a scan usually has some string in common, which can identity it to iptables to drop. For instance, each hit might have "ZmEu" in common, even if the originating IP changes.

Beta Testing The New CMS And Other Updates

My VPS provider recently had another bout with downtime, so I left the front end down as incentive to finish the CMS I've been working on. It's finally at a good stage to test live, so FE is now running on the platform.

The rough draft will evolve into the first version, although it's essentially already done. I have a few beta testers lined up in various environments, to hopefully solve any issues before release (if I do)..