Here's a problem I'm facing and I'm a total newbie so I have no idea how to fix it...

I have a dedicated server and *someone* is continously pinging me and sending me those requests for "cmd.exe" on all the domains I'm hosting. additionally, someone launched DOS attacks from my server last month and then I had to pay $75 to dialtone to fix up the mail, telnet and kernel. :(

The good part is I'm using linux so it's not harming me alot. but it's making my server busy and its using up my bandwidth. how can i block requests from certain IPs for all the domains? if i have to use .htaccess, where should I place it?

thanks a million!

Since your on a dedicated you could go about this a couple of ways.

1. Set up an IPChains or IPTables firewall rule and block the IP's in question.

2. Ask Dialtone if they installed updated ACL's in their routers to minimize these Code Red attacks.

Keep in mind by using the Firewall method you will still getting hit by these but the Firewall rule will drop / deny the request. Also as fast as you block one IP another will pop up so it's a never ending issue.

By using the second solution you are effectively blocking these requests before they enter the network thus saving wasted bandwidth.