There still seems to be a problem. My iptables -string DROP entry is now:
iptables -I INPUT 1 -p tcp -m multiport --dports 80,443 -m string --string "vtigercrm" --algo bm --to 300 -j DROP
Today I found this in my above example 123.456.789.012:80 log:
95.110.186.196 - - [04/Aug/2015:09:57:55 -0500] "GET /vtigercrm/test/logo/zizo.php HTTP/1.1" 404 2096 "-" "curl/7.15.5 (i386-redhat-linux-gnu) libcurl/7.15.5 OpenSSL/0.9.8b zlib/1.2.3 libidn/0.6.5"
I think that this is probably something to do with the iptables parameters, but I can't see it. It only happens with the 123.456.789.012:80 server.
iptables -I INPUT 1 -p tcp -m multiport --dports 80,443 -m string --string "vtigercrm" --algo bm --to 300 -j DROP
Today I found this in my above example 123.456.789.012:80 log:
95.110.186.196 - - [04/Aug/2015:09:57:55 -0500] "GET /vtigercrm/test/logo/zizo.php HTTP/1.1" 404 2096 "-" "curl/7.15.5 (i386-redhat-linux-gnu) libcurl/7.15.5 OpenSSL/0.9.8b zlib/1.2.3 libidn/0.6.5"
I think that this is probably something to do with the iptables parameters, but I can't see it. It only happens with the 123.456.789.012:80 server.