httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From dtufs <dt...@yahoo.com>
Subject Re: [users@httpd] How to close connection instead of sending 403?
Date Sun, 19 Jun 2005 11:37:00 GMT


--- Rich <app1@rbentley.com> wrote:

> You can configure mod_securiy so that it will not
> respond at all - ie - 
> it will just leave the client hanging waiting for a
> response (which it 
> will never get). Much like a 'silent' firewall.
> 
> As I said, not ideal (the connection is still live),
> but at least you 
> can suppress any outgoing data.

Yes, I read about this possibility in the modsecurity
documentation. However, this does not seem acceptable,
because too many "hanging" connections would very
likely cause DoS in a very short time.

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message