Thanks Ted, Unfortunately, our aquirrelmail servers are behind an F5 load
balancer that proxies connections so all we see on the mail servers is the IP
of the load balancer. As previously stated I can reproduce the exact same
problem against our test server by simply clicking in the login field and then
holding down on the Enter key. I am looking for a fix that would modify the
login.php to only permit a one time submit (permit only 1 submit). I am amazed
that no one else has ever experienced or reported this prior to now.
r/Derek
Ted Hatfield --- Re: [SM-USERS] Squirrelmaill Issue ---
From:"Ted Hatfield" <[email protected]>To:"Squirrelmail User Support Mailing
List" <[email protected]>Date:Tue, May 2, 2017 7:05
PMSubject:Re: [SM-USERS] Squirrelmaill Issue
On Tue, 2 May 2017, [email protected] wrote:>> SquirrelMail Issue: One
of our users was at the Login Page and tossed> something down on their desk
that kept the Enter key on their keyboard> depressed. This caused the number of
httpd processes on the server to> increase at a rapid rate until the max number
of 8000 httpd sessions, as> set in httpd.conf, was reached causing the webpage
to no longer be> available to any other users until restarting the httpd
service. I am able> to reproduce the issue by holding down on the Enter key.>>
SquirrelMail Version: 1.4.19> Installed Plugins:> 1. administrator> 2.
compatibility> 3. username> 4. compose_extras> 5. squirrelspell> 6.
show_headers> 7. addgraphics> 8. msg_flags> 9. quicksave> 10.
timeout_user> 11. unsafe_image_rules> PHP Version: 5.2.17> Web Server:
Apache 2.2.17> IMAP server: Courier-IMAP 4.3.1> SMTP server: Qmail 1.0.3>
OS Version: Red Hat Enterprise Linux 5.11> Installed By
: Following qmailrocks.org instructions in 2009> Browser: Internet
Explorer 11>>> Derek Wnek>>>
------------------------------------------------------------------------------>
Check out the vibrant tech community on one of the world's most> engaging tech
sites, Slashdot.org!
https://urldefense.proofpoint.com/v2/url?u=http-3A__sdm.link_slashdot&d=DwICAg&c=DQOk1h9dvX0xRcNQHKPB9_znru-_VoQNelOZTdu4ac4&r=UwwnarvPwFmVFDZqPSanaR8z_zwbBD3CHVL0bDcwvYU&m=h9UCMKt_0lsrX9UP2u1uVIgt8OA5tS64Lt3mnmz7_1A&s=wBN8xIRHzXBdoLGqww2MlHqcF87unUm_31Df8Uh55tY&e=
> -----This sounds like a http ddos issue rather than a squirrelmail issue.
Since squirrelmail is a php application that depends on an http server to serve
data the place to limit connections is in the http layer itself.Maybe you
should look into something like mod_limitipconn to limit requests per ip
directly inside apache.A quick google search on mod_limitipconn turns up plenty
of how-tos.Ted Hatfield-------------------------------------------
-----------------------------------Check out the vibrant tech community on one
of the world's mostengaging tech sites, Slashdot.org!
https://urldefense.proofpoint.com/v2/url?u=http-3A__sdm.link_slashdot&d=DwICAg&c=DQOk1h9dvX0xRcNQHKPB9_znru-_VoQNelOZTdu4ac4&r=UwwnarvPwFmVFDZqPSanaR8z_zwbBD3CHVL0bDcwvYU&m=h9UCMKt_0lsrX9UP2u1uVIgt8OA5tS64Lt3mnmz7_1A&s=wBN8xIRHzXBdoLGqww2MlHqcF87unUm_31Df8Uh55tY&e=
-----squirrelmail-users mailing listPosting guidelines:
https://urldefense.proofpoint.com/v2/url?u=http-3A__squirrelmail.org_postingguidelines&d=DwICAg&c=DQOk1h9dvX0xRcNQHKPB9_znru-_VoQNelOZTdu4ac4&r=UwwnarvPwFmVFDZqPSanaR8z_zwbBD3CHVL0bDcwvYU&m=h9UCMKt_0lsrX9UP2u1uVIgt8OA5tS64Lt3mnmz7_1A&s=2y7fSzj03Szoz3eturbVPcXp7sRON41B0e_cJcYLHN0&e=
List address: [email protected] archives:
https://urldefense.proofpoint.com/v2/url?u=http-3A__news.gmane.org_gmane.mail.squirrelmail.user&d=DwICAg&c=DQOk1h9dvX0xRcNQHKPB9_znru-_VoQNelOZTdu4ac4&r=UwwnarvPwFmVFDZqPSanaR8z_zwbBD3CHVL0b
DcwvYU&m=h9UCMKt_0lsrX9UP2u1uVIgt8OA5tS64Lt3mnmz7_1A&s=ynCMOhZvLKDy6pAgnEhl8jfiYkUqpFifkoGA1stEXSQ&e=
List info (subscribe/unsubscribe/change options):
https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.sourceforge.net_lists_listinfo_squirrelmail-2Dusers&d=DwICAg&c=DQOk1h9dvX0xRcNQHKPB9_znru-_VoQNelOZTdu4ac4&r=UwwnarvPwFmVFDZqPSanaR8z_zwbBD3CHVL0bDcwvYU&m=h9UCMKt_0lsrX9UP2u1uVIgt8OA5tS64Lt3mnmz7_1A&s=Ht7q_L0iAdflQFyxuOuJsN6uAE203RrgKYtgJ7Zqe6A&e=
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: [email protected]
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options):
https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
