bwnbwn - 5:42 am on Sep 24, 2010 (gmt 0)

"One of the ways this attack works is that looks for differentiation between 404s and 500 errors. Always returning the same HTTP code and sending them to the same place is one way to help block it."

Throw a 404 is the best option for all errors