Re: [users@httpd] How to close connection instead of sending 403?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




--- Rich <app1@xxxxxxxxxxxx> wrote:

> You can configure mod_securiy so that it will not
> respond at all - ie - 
> it will just leave the client hanging waiting for a
> response (which it 
> will never get). Much like a 'silent' firewall.
> 
> As I said, not ideal (the connection is still live),
> but at least you 
> can suppress any outgoing data.

Yes, I read about this possibility in the modsecurity
documentation. However, this does not seem acceptable,
because too many "hanging" connections would very
likely cause DoS in a very short time.

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux