> I have resorted at times to blocking the whole of China so this sounds
> like a sensible solution :)
>
> On 5/4/07, Göran Krampe <goran at krampe.se> wrote:
> > Ok, giving up now - gotta work.
> >
> > I documented what I did in "Log" - there is a DROP rule on a specific ip
> > in effect now. It seemed to originate from China. We should probably
> > install some kind of firewall script approach.

I would close all ports except 22 (ssh) and 80 (http) from the
outside. Furthermore you have to make sure that "ProxyRequests Off" is
set somewhere in the apache config else it is very likely to become an
open proxy relay.

Cheers,
Lukas

-- 
Lukas Renggli
http://www.lukas-renggli.ch