Re: Slapper worm does more than infect

2002-10-10 Thread Jean Christophe ANDRÉ
Hi, Moses Moore écrivait : > Is there a more efficient way of getting slapper to not grab my webserver > connections? I've considered recompiling apache to get rid of the > "Server:" HTTP response header line completely, but deploying a recompiled > binary (and recompiling every time) acr

Re: Slapper worm does more than infect

2002-10-10 Thread Jean Christophe ANDRÉ
Hi, Moses Moore écrivait : > Is there a more efficient way of getting slapper to not grab my webserver > connections? I've considered recompiling apache to get rid of the > "Server:" HTTP response header line completely, but deploying a recompiled > binary (and recompiling every time) ac

Re: Slapper worm does more than infect

2002-10-09 Thread Moses Moore
On Wed, 2002-10-09 at 12:27, Xavier Santolaria wrote: > > I've been using a script to watch for slapper attempts and restart the > > webserver if it sees it (code below), but this is inefficient, costs > > CPU, and unless I run this every minute I will get some downtime. Is > > there a more effici

Slapper worm does more than infect

2002-10-09 Thread Moses Moore
I've patched my servers, a long time ago. I've noticed that slapper worm (or whatver is causing the "HTTP/1.1 request without hostname" and "GET_CLIENT_MASTER_KEY:key arg too long" lines in apache's error log) causes another problem: While it's attempting to infect my servers, it seizes all the

Re: Slapper worm does more than infect

2002-10-09 Thread Moses Moore
On Wed, 2002-10-09 at 12:27, Xavier Santolaria wrote: > > I've been using a script to watch for slapper attempts and restart the > > webserver if it sees it (code below), but this is inefficient, costs > > CPU, and unless I run this every minute I will get some downtime. Is > > there a more effic

Slapper worm does more than infect

2002-10-09 Thread Moses Moore
I've patched my servers, a long time ago. I've noticed that slapper worm (or whatver is causing the "HTTP/1.1 request without hostname" and "GET_CLIENT_MASTER_KEY:key arg too long" lines in apache's error log) causes another problem: While it's attempting to infect my servers, it seizes all the