Re: slowloris, accf_http and POST requests

2009-06-23 Thread Ruben de Groot
On Mon, Jun 22, 2009 at 05:35:56PM -0500, Dan Nelson typed: In the last episode (Jun 22), Ruben de Groot said: My main concern here is if applying the trivial patch I posted would break anything in the http protocol layer. And if not, why isn't the POST method included in the http accept

Re: slowloris, accf_http and POST requests

2009-06-23 Thread Michael Powell
Ruben de Groot wrote: On Mon, Jun 22, 2009 at 05:35:56PM -0500, Dan Nelson typed: In the last episode (Jun 22), Ruben de Groot said: My main concern here is if applying the trivial patch I posted would break anything in the http protocol layer. And if not, why isn't the POST method

Re: slowloris, accf_http and POST requests

2009-06-23 Thread Fabian Keil
Ruben de Groot mai...@bzerk.org wrote: On Mon, Jun 22, 2009 at 05:35:56PM -0500, Dan Nelson typed: In the last episode (Jun 22), Ruben de Groot said: My main concern here is if applying the trivial patch I posted would break anything in the http protocol layer. And if not, why isn't

Re: slowloris, accf_http and POST requests

2009-06-23 Thread Ruben de Groot
On Tue, Jun 23, 2009 at 05:23:19PM +0200, Fabian Keil typed: Ruben de Groot mai...@bzerk.org wrote: On Mon, Jun 22, 2009 at 05:35:56PM -0500, Dan Nelson typed: In the last episode (Jun 22), Ruben de Groot said: My main concern here is if applying the trivial patch I posted would

slowloris, accf_http and POST requests

2009-06-22 Thread Ruben de Groot
Hi, Can enybody explain why the http accept filter only works on GET/HEAD requests? The reason I ask is I was checking up on the slowloris DOS tool (http://ha.ckers.org/slowloris/slowloris.pl) and, like others before me, found that the -httpready switch (which uses POST instead of GET) renders

Re: slowloris, accf_http and POST requests

2009-06-22 Thread Norbert Papke
On June 22, 2009, Ruben de Groot wrote: Can enybody explain why the http accept filter only works on GET/HEAD requests? The reason I ask is I was checking up on the slowloris DOS tool (http://ha.ckers.org/slowloris/slowloris.pl) and, like others before me, found that the -httpready switch

Re: slowloris, accf_http and POST requests

2009-06-22 Thread Ruben de Groot
On Mon, Jun 22, 2009 at 08:45:23AM -0700, Norbert Papke typed: On June 22, 2009, Ruben de Groot wrote: Can enybody explain why the http accept filter only works on GET/HEAD requests? The reason I ask is I was checking up on the slowloris DOS tool

Re: slowloris, accf_http and POST requests

2009-06-22 Thread Dan Nelson
In the last episode (Jun 22), Ruben de Groot said: On Mon, Jun 22, 2009 at 08:45:23AM -0700, Norbert Papke typed: On June 22, 2009, Ruben de Groot wrote: Can enybody explain why the http accept filter only works on GET/HEAD requests? The reason I ask is I was checking up on the