CodeRed Fix B

Wilfred L. Guerin wrote:
> Can someone please prepare an instruction of how to set apache and other
> servers up to route /*n.threat requests to a cgi/script/module/etc so we
> can immediately release this remedy...

Add the following lines to httpd.conf:

<Location /default.ida*>
    Deny from all
    ErrorDocument 403 http://stable.host.foo/abuse-log.cgi
</Location>

Replace http://stable.host.foo/abuse-log.cgi with the abuse logger.
Make sure to include the full URL in the ErrorDocument statement.