Re: [EMAIL PROTECTED] How to prevent from simple DoS?

2007-11-19 Thread Greg Boyington
On Nov 19, 2007 10:47 AM, Nick Kew <[EMAIL PROTECTED]> wrote: > On Mon, 19 Nov 2007 09:59:20 -0500 > "Greg Boyington" <[EMAIL PROTECTED]> wrote: > > > On Nov 19, 2007 3:21 AM, Christian Folini <[EMAIL PROTECTED]> > > wrote: > > > Hey Gr

Re: [EMAIL PROTECTED] How to prevent from simple DoS?

2007-11-19 Thread Greg Boyington
> Thanks. Hoped you had found the silver bullet though. :) Nope, sadly. Although I haven't attempted it myself, I've been wondering of late if using tcp wrappers in combination with httpd would be effective/advisable. On our FreeBSD systems, we use a little python script in combination with host

Re: [EMAIL PROTECTED] How to prevent from simple DoS?

2007-11-19 Thread Greg Boyington
On Nov 19, 2007 3:21 AM, Christian Folini <[EMAIL PROTECTED]> wrote: > Hey Greg, > > could you elaborate on this? How would you prevent this > attack with mod_access? In one case where an attack was under way but I didn't have access to the firewall, I added something like: Order Deny,Allow # off

Re: [EMAIL PROTECTED] How to prevent from simple DoS?

2007-11-18 Thread Greg Boyington
On Nov 18, 2007 10:32 AM, Joshua Slive <[EMAIL PROTECTED]> wrote: > On Nov 18, 2007 10:28 AM, Ben Macintosh <[EMAIL PROTECTED]> wrote: > > Hi > > I'm currently facing a problem which I can't find any help for. > > Every once in a while, my webserver doesn't respond to requests > > anymore, i.e. the

Re: [EMAIL PROTECTED] debugging strategies for httpd that kills the box

2007-11-16 Thread Greg Boyington
On Nov 16, 2007 10:39 AM, Christian Folini <[EMAIL PROTECTED]> wrote: > On Fri, Nov 16, 2007 at 10:06:50AM -0500, Greg Boyington wrote: > > > - Play around with MaxRequestsPerChild. A typical value > > > > I will do -- I experimented with low values (100-1000) in

Re: [EMAIL PROTECTED] debugging strategies for httpd that kills the box

2007-11-16 Thread Greg Boyington
On Nov 16, 2007 2:19 AM, Christian Folini <[EMAIL PROTECTED]> wrote: > Hey Greg, Hi Christian, thanks for your response. > - Play around with MaxRequestsPerChild. A typical value I will do -- I experimented with low values (100-1000) in addition to 0, but nothing seemed to correlate. In my tes

[EMAIL PROTECTED] debugging strategies for httpd that kills the box

2007-11-15 Thread greg boyington
Hello List, I have a FreeBSD 5.5 (amd64) server with the following: Apache/2.0.61 (FreeBSD) mod_ssl/2.0.53 OpenSSL/0.9.7e-p1 PHP/4.4.4 with Suhosin-Patch mod_apreq2-20051231/2.6.0 mod_perl/2.0.3 Perl/v5.8.6 Background: The server was recently updated to FreeBSD 5.5 from 5.3, which had run for a