Re: [users@httpd] need help fighting DoS attack on Apache

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sunday 28 May 2006 21:23, Sergey Tsalkov wrote:
> I'm using Apache 1.3.36.

*sigh*.  Of course a server that's been obnsolete for more than
four years isn't up to date.  Any 1.x server leaves you with every
connection tying up an entire process.

> mod_choke

Never heard of it.

> Nick, you mentioned that Apache 2.2 has built-in countermeasures to
> stop this sort of attack..

Compared to what you're using, any 2.x with the worker MPM is going to
be a huge improvement.  2.2's event MPM may improve on that.  See also
http://httpd.apache.org/docs/2.2/mod/core.html#acceptfilter
for specific defence that works with any MPM on some operating systems.

-- 
Nick Kew

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux