Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 2 subscribers
  • Views 2075 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

googlebot being blocked by intrusion protection

Fury
For some reason googlebot is being blocked by Snort / Intrustion Protection on my ASG 220 running 7.005 firmware:

Name:    crawl-66-249-72-140.googlebot.com
Address:  66.249.72.140

2007:06:30-13:16:23 (none) barnyard[5317]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="WEB-PHP viewtopic.php access" group="217" srcip="66.249.72.140" dstip="1.2.3.4" proto="6" srcport="62811" dstport="80" sid="2229" class="Web Application Attack" priority="1" generator="1" msgid="0"

For now I have simply added this bot to the list of exception, but to be honest I don't want to have to add each and every googlebot to this list by hand. So I just added *.googlebots.com to the list of exceptions aswell. (hope that does the trick)

Did anyone else have this problem? Why is Snort reacting to googlebot?


This thread was automatically locked due to age.
Parents
  • 0
    Google is trying to access that .PHP page that is referenced in the rule; you can either set the rule to Alert only or disable it.  It's not surprising that this is a false alert; don't worry about it.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Reply
  • 0
    Google is trying to access that .PHP page that is referenced in the rule; you can either set the rule to Alert only or disable it.  It's not surprising that this is a false alert; don't worry about it.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Children
Cookie Information Banner