2007/11/18, Joshua Slive <joshua@xxxxxxxx>: > See: > http://httpd.apache.org/docs/trunk/misc/security_tips.html#dos > > The standard solution is a simple firewall rule to control number of > connections per ip at some reasonable level. I already thought about using a firewall rule. Although it could be quite difficult to get it right. As every malicious request blocks a slot for 5 minutes there hasn't got to be a lot of traffic/requests. But I guess that's a possibility which would work, even though I'd prefer an apache solution. Ben --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx