Re: [EMAIL PROTECTED] How to prevent from simple DoS?

2007-11-19 Thread Ben Macintosh
2007/11/19, Joshua Slive <[EMAIL PROTECTED]>: > On Nov 19, 2007 3:19 PM, Ben Macintosh <[EMAIL PROTECTED]> wrote: > > > Thanks for pointing me to the right direction - never heard about > > AcceptFilter before. > > Interesting, because it is specifically suggest

Re: [EMAIL PROTECTED] How to prevent from simple DoS?

2007-11-19 Thread Ben Macintosh
2007/11/19, Nick Kew <[EMAIL PROTECTED]>: > On Mon, 19 Nov 2007 20:19:20 +0100 > "Ben Macintosh" <[EMAIL PROTECTED]> wrote: > > I already thought about using a firewall rule. Although it could be > > quite difficult to get it right. As every malicious reque

Re: [EMAIL PROTECTED] How to prevent from simple DoS?

2007-11-19 Thread Ben Macintosh
2007/11/19, Greg Boyington <[EMAIL PROTECTED]>: > On Nov 19, 2007 3:21 AM, Christian Folini <[EMAIL PROTECTED]> wrote: > > Hey Greg, > > > > could you elaborate on this? How would you prevent this > > attack with mod_access? > > In one case where an attack was under way but I didn't have access to

Re: [EMAIL PROTECTED] How to prevent from simple DoS?

2007-11-19 Thread Ben Macintosh
2007/11/19, Christian Folini <[EMAIL PROTECTED]>: > > > > As I understand the issue it's a very simple DoS as it neither does > > > > require a lot of cpu nor bandwidth on the client side. > > Is there a proper name for this kind of attack. I am not sure > the original question was referring to a r

Re: [EMAIL PROTECTED] How to prevent from simple DoS?

2007-11-19 Thread Ben Macintosh
2007/11/18, Joshua Slive <[EMAIL PROTECTED]>: > See: > http://httpd.apache.org/docs/trunk/misc/security_tips.html#dos > > The standard solution is a simple firewall rule to control number of > connections per ip at some reasonable level. I already thought about using a firewall rule. Although it

[EMAIL PROTECTED] How to prevent from simple DoS?

2007-11-18 Thread Ben Macintosh
Hi I'm currently facing a problem which I can't find any help for. Every once in a while, my webserver doesn't respond to requests anymore, i.e. the browser simply keeps on loading but doesn't get any data. Using the status mod I found that in such a situation every possible "slot" is being used b