RE: [users@httpd] How to close connection instead of sending 403?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> -----Original Message-----
> From: dtufs [mailto:dtufs@xxxxxxxxx]
> Sent: Montag, 20. Juni 2005 11:48
> To: users@xxxxxxxxxxxxxxxx
> Subject: RE: [users@httpd] How to close connection instead of sending
> 403?
> 
> 
> 
> 
> --- Boyle Owen <Owen.Boyle@xxxxxxx> wrote:
> 
> > Apache is an application
> > and can only block at the HTTP layer - it can't
> > interfere with TCP/IP. 
> 
> That is certainly true, but Apache must be capable of
> closing a connection -- that seems to be an elementary
> operation for a web server (and possibly also capable
> of deciding not to send back any reply).

It depends on what you mean by "connection". TCP/IP is more like the postal service than the telephone system so there aren't really any connections at all (you don't "connect" to your postman). The process of communication between the client and server is normally called a "session" and that can be kept alive to allow repeated requests. However, apache is governed by the HTTP RFC (2068) which states (section 6) that;

"After receiving and interpreting a request message, a server responds with an HTTP response message."

So apache is not allowed to act like a firewall and silently drop a request. The RFC specifically requires the server to respond to valid requests with a response message (which may be 403 Forbidden). Unfortunately, there's nothing in the RFC that allows for "closing a connection".

Rgds,
Owen Boyle
Disclaimer: Any disclaimer attached to this message may be ignored.  






> 
> __________________________________________________
> Do You Yahoo!?
> Tired of spam?  Yahoo! Mail has the best spam protection around 
> http://mail.yahoo.com 
> 
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP 
> Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
>    "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
> 
>
 
 
This message is for the named person's use only. It may contain confidential, proprietary or legally privileged information. No confidentiality or privilege is waived or lost by any mistransmission. If you receive this message in error, please notify the sender urgently and then immediately delete the message and any copies of it from your system. Please also immediately destroy any hardcopies of the message. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. The sender's company reserves the right to monitor all e-mail communications through their networks. Any views expressed in this message are those of the individual sender, except where the message states otherwise and the sender is authorised to state them to be the views of the sender's company.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux