On Tue, 2 May 2017, dwnek@xxxxxxxxxxxxxx wrote: > > SquirrelMail Issue: One of our users was at the Login Page and tossed > something down on their desk that kept the Enter key on their keyboard > depressed. This caused the number of httpd processes on the server to > increase at a rapid rate until the max number of 8000 httpd sessions, as > set in httpd.conf, was reached causing the webpage to no longer be > available to any other users until restarting the httpd service. I am able > to reproduce the issue by holding down on the Enter key. > > SquirrelMail Version: 1.4.19 > Installed Plugins: > 1. administrator > 2. compatibility > 3. username > 4. compose_extras > 5. squirrelspell > 6. show_headers > 7. addgraphics > 8. msg_flags > 9. quicksave > 10. timeout_user > 11. unsafe_image_rules > PHP Version: 5.2.17 > Web Server: Apache 2.2.17 > IMAP server: Courier-IMAP 4.3.1 > SMTP server: Qmail 1.0.3 > OS Version: Red Hat Enterprise Linux 5.11 > Installed By: Following qmailrocks.org instructions in 2009 > Browser: Internet Explorer 11 > > > Derek Wnek > > > ------------------------------------------------------------------------------ > Check out the vibrant tech community on one of the world's most > engaging tech sites, Slashdot.org! http://sdm.link/slashdot > ----- This sounds like a http ddos issue rather than a squirrelmail issue. Since squirrelmail is a php application that depends on an http server to serve data the place to limit connections is in the http layer itself. Maybe you should look into something like mod_limitipconn to limit requests per ip directly inside apache. A quick google search on mod_limitipconn turns up plenty of how-tos. Ted Hatfield ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot ----- squirrelmail-users mailing list Posting guidelines: http://squirrelmail.org/postingguidelines List address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx List archives: http://news.gmane.org/gmane.mail.squirrelmail.user List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
