On Sunday 28 May 2006 21:23, Sergey Tsalkov wrote:
> I'm using Apache 1.3.36.

*sigh*.  Of course a server that's been obnsolete for more than
four years isn't up to date.  Any 1.x server leaves you with every
connection tying up an entire process.

> mod_choke

Never heard of it.

> Nick, you mentioned that Apache 2.2 has built-in countermeasures to
> stop this sort of attack..

Compared to what you're using, any 2.x with the worker MPM is going to
be a huge improvement.  2.2's event MPM may improve on that.  See also
http://httpd.apache.org/docs/2.2/mod/core.html#acceptfilter
for specific defence that works with any MPM on some operating systems.

-- 
Nick Kew

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to