# GORby - grouping and hiding sites
GroupSite	skynet.be	Skynet
HideSite	skynet.be
GroupSite	80.200.		Skynet
HideSite	80.200.
GroupSite	80.201.		Skynet
HideSite	80.201.
GroupSite	telenet-ops.be	Telenet
HideSite	telenet-ops.be
GroupSite	213.224.	Telenet
HideSite	213.224.
GroupSite	217.136.	Skynet
HideSite	217.136.

# GORby - grouping & hiding user agents
GroupAgent	slurp@inktomi.com	Other
HideAgent	slurp@inktomi.com
GroupAgent	WebPro	Mobile Phone/Handheld
HideAgent	WebPro
GroupAgent	DoCoMo	Mobile Phone/Handheld
HideAgent	DoCoMo
GroupAgent	Oper	Opera
HideAgent	Oper
GroupAgent	Konqueror	Konqueror
HideAgent	Konqueror
GroupAgent	MSIE	MS Internet Explorer
HideAgent	MSIE
GroupAgent	Mozilla/5.	Mozilla/Netscape
HideAgent	Mozilla/5.
GroupAgent	Gec	Mozilla/Netscape
HideAgent	Gec
GroupAgent	Pompos/	Other
HideAgent	Pompos/
GroupAgent	Googlebot/	Googlebot indexer
HideAgent	Googlebot/
GroupAgent	Lynx*	Lynx
HideAgent	Lynx*
GroupAgent	Muncher	Other
HideAgent	Muncher
GroupAgent	Java/1.*	Other
HideAgent	Java/1.*
GroupAgent	GetRight	Other
HideAgent	GetRight
GroupAgent	QuepasaCreep	Other
HideAgent	QuepasaCreep
GroupAgent	PHP/4.		Other
HideAgent	PHP/4.

# Ignore attacks targetting windows servers
IgnoreURL	default.ida
IgnoreURL	.exe
IgnoreURL	/winnt/
IgnoreURL	/windows/
IgnoreURL	_bin/
IgnoreURL	/MSADC/
IgnoreURL	/msadc/
IgnoreURL	/scripts/
IgnoreURL	.hash=	# Ignore file sharing scans - not an attack


#HideAgent	* 
#HideAgent	PHP/4

# GORby - Hiding certain file extentions
HideURL		*.css
HideURL		*.CSS
HideURL		*.js
HideURL		*.JS
HideURL		*.zip
HideURL		*.ZIP
HideURL		*.rar
HideURL		*.RAR
HideURL		*.mp3
HideURL		*.MP3

# GORby - Ignore certain file extentions
IgnoreURL	*.ico
IgnoreURL	*.ICO


# GORby - Hiding certain parts of the site
# reason: may incorrectly increase MSIE share in user agent list
HideURL		/phpmyadmin/*
HideURL		/phppgadmin/*
HideURL		/webalizer/*

# GORby - Hiding certain referrers
HideReferrer	*localhost*

# GORby - Ignoring certain sites (my own computers ;-)
IgnoreSite	localhost
IgnoreSite	barati
IgnoreSite	iguana
IgnoreSite	omicron
IgnoreSite	192.168.168.
IgnoreSite	10.0.3.36
IgnoreSite	127.0.0.