On 23 Jun 2009, at 13:25, Neelesh Gurjar wrote:
MaxClients 150
So slowloris only needs to make 150 connections to tie up your server! A simple raise to, say, 1500, would prevent a single slowloris machine bringing you down[1]. Though of course you're still vulnerable to DDoS: for that you might want to raise it higher and use traffic management. [1] for any of the machines I've tried it on - http://bahumbug.wordpress.com/2009/06/21/slowloris/ -- Nick Kew --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org
