Rails 1.1.6 released with further security updates

Just one day after the security announcement and patch, there is a new Rails release, 1.1.6, which further addresses the security risk.

Earlier in the week when the first announcement came out there wasn’t any indication of what the issue was, but apparently the security risk was a hole where a user could execute code on your filesystem. Nice. A reminder to do some testing with that shiny new development framework before you deploy your new app out there on a production server…

Blacklisting incoming sites using iptables

Use this command to add an ip address to be blocked by iptables:

<code>
iptables -I INPUT -s x.x.x.x -j DROP
iptables -I INPUT -s x.x.x.x -j LOG
</code>

This example inserts a rule at the top of the table to block all incoming requests from ip x.x.x.x, and then inserts a second rule at the top to first log any connection attempts from this address (before they are blocked).

To see what rules are currently configured, use: iptables -L

For more info, see this entry in the O’Reily Linux Hacks book.