<?xml version="1.0" encoding="iso-8859-1" ?>
<?xml-stylesheet title="XSL_formatting" type="text/xsl" href="/images/lists/rssstyle2.xsl"?>
<rss version="2.0">
<channel>
<title>Apache | Dev</title>
<description>Mailing List Archive by Gossamer Threads</description>
<link>http://www.gossamer-threads.com/lists/apache/dev/</link>
<language>en-us</language>
<copyright>(c) Gossamer Threads Inc. All rights reserved.</copyright>
<lastBuildDate>04 Jul  2009 14:40:08 -0800</lastBuildDate>
<ttl>120</ttl>
<image>
<title>Gossamer Threads | Apache | Dev</title>
<width>75</width>
<height>23</height>
<link>http://www.gossamer-threads.com/lists/apache/dev/</link>
<url>http://www.gossamer-threads.com/images/lists/rss_logo.jpg</url>
</image>
<item>
<title>Re: Creating a new thread inside a module</title>
<description>Hi All, I am still unable to create a new thread inside the balancer_init function. Here the way that I tried. But in this way new thread was create</description>
<pubDate>04 Jul  2009 12:13:54 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/370117</link>
</item><item>
<title>Re: svn commit: r786825 - /httpd/httpd/branches/2.2.x/STATUS</title>
<description>On 06/20/2009 03:54 PM, rpluem@apache.org wrote: &amp;gt; Author: rpluem &amp;gt; Date: Sat Jun 20 13:54:23 2009 &amp;gt; New Revision: 786825 &amp;gt; &amp;gt; URL: http://svn.apache.</description>
<pubDate>04 Jul  2009 00:57:14 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/370114</link>
</item><item>
<title>Information about &amp;quot;svn commit: r570307 - in /httpd/httpd/branches/2.0.x:CHANGES STATUS server/log.c&amp;quot;</title>
<description>Hi William Rowe,  After upgrading Apache from version 2.059 to 2.0.63, in Netware the Apache process doesn&amp;#039;t stop immediately but waits for some act</description>
<pubDate>03 Jul  2009 05:00:04 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/370100</link>
</item><item>
<title>Re: mod_deflate DoS</title>
<description>On Sun, Jun 28, 2009 at 08:20:20PM +0200, Stefan Fritsch wrote: &amp;gt; we have received a bug report [1] that a DoS is possible with &amp;gt; mod_deflate since i</description>
<pubDate>03 Jul  2009 03:00:48 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/370095</link>
</item><item>
<title>some updates to snapshot site?</title>
<description>All, I just wanted to point someone to a recent snapshot of 2.2 branch, but found that there is none; we only have 2.0 branch and HEAD ... I think it</description>
<pubDate>02 Jul  2009 16:14:11 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/370080</link>
</item><item>
<title>Re: svn commit: r790205 -	/httpd/httpd/trunk/modules/experimental/mod_noloris.c</title>
<description>Joe Orton wrote: &amp;gt; On Thu, Jul 02, 2009 at 01:37:22PM +0100, Nick Kew wrote: &amp;gt;&amp;gt; Joe Orton wrote: &amp;gt;&amp;gt; &amp;gt;&amp;gt;&amp;gt; 1) A *linear-time* search on a shm segment, us</description>
<pubDate>02 Jul  2009 09:01:02 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/370070</link>
</item><item>
<title>Re: svn commit: r790205 - /httpd/httpd/trunk/modules/experimental/mod_noloris.c</title>
<description>On Thu, Jul 02, 2009 at 01:37:22PM +0100, Nick Kew wrote: &amp;gt; Joe Orton wrote: &amp;gt; &amp;gt;&amp;gt; 1) A *linear-time* search on a shm segment, using strstr. &amp;gt; &amp;gt; 2) ...</description>
<pubDate>02 Jul  2009 07:41:52 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/370069</link>
</item><item>
<title>Re: svn commit: r790205 - /httpd/httpd/trunk/modules/experimental/mod_noloris.c</title>
<description>On 7/2/09 8:37 AM, &amp;quot;Nick Kew&amp;quot; &amp;lt;nick@webthing.com&amp;gt; wrote: &amp;gt; Not everyone who&amp;#039;s concerned right now about slowloris has &amp;gt; iptables at their disposal.</description>
<pubDate>02 Jul  2009 07:00:31 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/370068</link>
</item><item>
<title>Re: svn commit: r790205 -	/httpd/httpd/trunk/modules/experimental/mod_noloris.c</title>
<description>Joe Orton wrote: &amp;gt; 1) A *linear-time* search on a shm segment, using strstr. &amp;gt; 2) ... for each new connection. With the expectation that the shm se</description>
<pubDate>02 Jul  2009 05:37:22 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/370063</link>
</item><item>
<title>Re: mod_ssl / ssl_engine_ocsp.c customizations</title>
<description>On Fri, Jun 26, 2009 at 03:55:27PM +0200, Natanael Mignon - michael-wessel.de wrote: &amp;gt; I am currently working on - dirty, please have mercy - customiz</description>
<pubDate>02 Jul  2009 04:48:04 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/370062</link>
</item><item>
<title>Re: svn commit: r790205 - /httpd/httpd/trunk/modules/experimental/mod_noloris.c</title>
<description>On Jul 2, 2009, at 5:58 AM, Joe Orton wrote: &amp;gt; On Wed, Jul 01, 2009 at 03:01:55PM -0000, niq@apache.org wrote: &amp;gt;&amp;gt; Author: niq &amp;gt;&amp;gt; Date: Wed Jul 1 15:</description>
<pubDate>02 Jul  2009 04:32:09 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/370061</link>
</item><item>
<title>Re: svn commit: r790205 - /httpd/httpd/trunk/modules/experimental/mod_noloris.c</title>
<description>On Wed, Jul 01, 2009 at 03:01:55PM -0000, niq@apache.org wrote: &amp;gt; Author: niq &amp;gt; Date: Wed Jul 1 15:01:55 2009 &amp;gt; New Revision: 790205 &amp;gt; &amp;gt; URL: http:/</description>
<pubDate>02 Jul  2009 02:58:15 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/370059</link>
</item><item>
<title>Re: Creating a new thread inside a module</title>
<description>Hi, please can anybody  roughly tell me how to register a new thread under the main child thread pool .It is great help for me. Shaniro Herath.</description>
<pubDate>01 Jul  2009 16:11:41 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/370045</link>
</item><item>
<title>Re: svn commit: r790205 - /httpd/httpd/trunk/modules/experimental/mod_noloris.c</title>
<description>Ruediger Pluem wrote: &amp;gt;&amp;gt; + * The major difference is that mod_antiloris checks the scoreboard &amp;gt;&amp;gt; + * on every request. This implies a per-request ov</description>
<pubDate>01 Jul  2009 13:58:51 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/370041</link>
</item><item>
<title>Re: svn commit: r790205 - /httpd/httpd/trunk/modules/experimental/mod_noloris.c</title>
<description>Ruediger Pluem wrote: &amp;gt; &amp;gt; I am not sure if doing this for each connection (not each *request*) &amp;gt; is really that much of a performace hit. I used a mo</description>
<pubDate>01 Jul  2009 12:59:05 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/370040</link>
</item><item>
<title>Re: svn commit: r790205 - /httpd/httpd/trunk/modules/experimental/mod_noloris.c</title>
<description>On Wed, Jul 1, 2009 at 8:01 AM, &amp;lt;niq@apache.org&amp;gt; wrote: &amp;gt; Author: niq &amp;gt; Date: Wed Jul Â 1 15:01:55 2009 &amp;gt; New Revision: 790205 &amp;gt; &amp;gt; URL: http://svn.apa</description>
<pubDate>01 Jul  2009 12:33:24 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/370039</link>
</item><item>
<title>Re: svn commit: r790205 - /httpd/httpd/trunk/modules/experimental/mod_noloris.c</title>
<description>tOn 01.07.2009 17:01, niq@apache.org wrote: &amp;gt; Author: niq &amp;gt; Date: Wed Jul 1 15:01:55 2009 &amp;gt; New Revision: 790205 &amp;gt; &amp;gt; URL: http://svn.apache.org/view</description>
<pubDate>01 Jul  2009 12:31:57 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/370038</link>
</item><item>
<title>Re: Creating a new thread inside a module</title>
<description>h iroshan wrote: &amp;gt; &amp;gt; Hi William and Mladen, &amp;gt; &amp;gt; Thanks both of you but i am still struggling with my thread creation. I &amp;gt; create my background thre</description>
<pubDate>01 Jul  2009 09:14:22 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/370022</link>
</item><item>
<title>Re: mod_noloris: mitigating against slowloris-style attack</title>
<description>On Wed, Jul 1, 2009 at 9:49 AM, Nick Kew&amp;lt;nick@webthing.com&amp;gt; wrote: &amp;gt; Gonzalo Arana wrote: &amp;gt;&amp;gt; &amp;gt;&amp;gt; Hi, &amp;gt;&amp;gt; &amp;gt;&amp;gt; Keeping whitelist up to date is rather trick</description>
<pubDate>01 Jul  2009 06:32:43 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/370008</link>
</item><item>
<title>Re: mod_noloris: mitigating against slowloris-style attack</title>
<description>To avoid a ban on 89.0.0.13 also banning 9.0.0.1, we might want to include the separators in the strstr, as in the attached patch.</description>
<pubDate>01 Jul  2009 06:30:55 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/370007</link>
</item><item>
<title>Re: mod_noloris: mitigating against slowloris-style attack</title>
<description>On Wed, Jul 1, 2009 at 8:49 AM, Nick Kew&amp;lt;nick@webthing.com&amp;gt; wrote: &amp;gt; Gonzalo Arana wrote: &amp;gt;&amp;gt; &amp;gt;&amp;gt; Hi, &amp;gt;&amp;gt; &amp;gt;&amp;gt; Keeping whitelist up to date is rather trick</description>
<pubDate>01 Jul  2009 06:12:32 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/370000</link>
</item><item>
<title>Re: mod_noloris: mitigating against slowloris-style attack</title>
<description>Gonzalo Arana wrote: &amp;gt; Hi, &amp;gt; &amp;gt; Keeping whitelist up to date is rather tricky. &amp;gt; &amp;gt; How about having any/all of these directives? &amp;gt; &amp;gt; # time between</description>
<pubDate>01 Jul  2009 05:49:30 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369999</link>
</item><item>
<title>Re: mod_noloris: mitigating against slowloris-style attack</title>
<description>Nick Kew wrote: &amp;gt; I&amp;#039;ve actually hacked up mod_noloris to do exactly that. Was planning to &amp;gt; test-drive then post, but since you bring the matter up,</description>
<pubDate>01 Jul  2009 05:45:59 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369998</link>
</item><item>
<title>Re: mod_noloris: mitigating against slowloris-style attack</title>
<description>Hi, Keeping whitelist up to date is rather tricky. How about having any/all of these directives? # time between accept(2) call and the full request</description>
<pubDate>01 Jul  2009 05:33:06 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369997</link>
</item><item>
<title>Re: mod_noloris: mitigating against slowloris-style attack</title>
<description>Jeff Trawick wrote: &amp;gt; On Wed, Jul 1, 2009 at 5:12 AM, Nick Kew &amp;lt;nick@webthing.com &amp;gt; &amp;lt;mailto:nick@webthing.com&amp;gt;&amp;gt; wrote: &amp;gt; &amp;gt;   fredk2 wrote: &amp;gt; &amp;gt;</description>
<pubDate>01 Jul  2009 05:04:15 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369996</link>
</item><item>
<title>Re: mod_noloris: mitigating against slowloris-style attack</title>
<description>On Wed, Jul 1, 2009 at 5:12 AM, Nick Kew &amp;lt;nick@webthing.com&amp;gt; wrote: &amp;gt; fredk2 wrote: &amp;gt; &amp;gt;&amp;gt; Hi Nick, &amp;gt;&amp;gt; &amp;gt;&amp;gt; I looked at the code (I am not a coder) and w</description>
<pubDate>01 Jul  2009 04:57:35 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369995</link>
</item><item>
<title>Re: Creating a new thread inside a module</title>
<description>shaniro herath wrote: &amp;gt; Hi Iroshan and All, &amp;gt; &amp;gt; Same problem here. I passed function with infinite while loop when &amp;gt; creating the thread . Thread c</description>
<pubDate>01 Jul  2009 03:40:39 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369994</link>
</item><item>
<title>Re: Creating a new thread inside a module</title>
<description>Hi Iroshan and All, Same problem here. I passed function with infinite while loop when creating the thread . Thread creation is done inside a functi</description>
<pubDate>01 Jul  2009 03:23:49 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369993</link>
</item><item>
<title>Re: Creating a new thread inside a module</title>
<description>Hi William and Mladen, Thanks both of you but i am still struggling with my thread creation. I create my background thread inside the balancer_init</description>
<pubDate>01 Jul  2009 03:14:30 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369992</link>
</item><item>
<title>Re: mod_noloris: mitigating against slowloris-style attack</title>
<description>fredk2 wrote: &amp;gt; Hi Nick, &amp;gt; &amp;gt; I looked at the code (I am not a coder) and wondered what made you say &amp;quot;it&amp;#039;s &amp;gt; geared clearly to the very small server.</description>
<pubDate>01 Jul  2009 02:12:50 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369990</link>
</item><item>
<title>Re: mod_noloris: mitigating against slowloris-style attack</title>
<description>Hi Nick, I looked at the code (I am not a coder) and wondered what made you say &amp;quot;it&amp;#039;s geared clearly to the very small server. &amp;quot; Rgds - Fred  Nick</description>
<pubDate>30 Jun  2009 18:56:35 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369983</link>
</item><item>
<title>Re: Creating a new thread inside a module</title>
<description>Mladen Turk wrote: &amp;gt; Perhaps adding something like ap_preloaded_modules table to which &amp;gt; the module can assign itself. But I presume there&amp;#039;ll be and i</description>
<pubDate>30 Jun  2009 10:14:34 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369957</link>
</item><item>
<title>Re: Creating a new thread inside a module</title>
<description>William A. Rowe, Jr. wrote: &amp;gt; Mladen Turk wrote: &amp;gt; &amp;gt; See asp_module_lock - this is entire windows specific; I see. Nice trick. &amp;gt; you are right &amp;gt; th</description>
<pubDate>30 Jun  2009 09:50:18 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369956</link>
</item><item>
<title>Re: Creating a new thread inside a module</title>
<description>Mladen Turk wrote: &amp;gt; William A. Rowe, Jr. wrote: &amp;gt;&amp;gt;&amp;gt; However it requires to be statically compiled so it &amp;gt;&amp;gt;&amp;gt; can survive the child death. &amp;gt;&amp;gt; &amp;gt;&amp;gt; *That&amp;#039;</description>
<pubDate>30 Jun  2009 09:07:04 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369955</link>
</item><item>
<title>Re: protocol for reporting bug that &amp;#039;may&amp;#039; be considered exploit</title>
<description>Thank you! Will file one shortly.  On Mon, Jun 29, 2009 at 9:24 PM, Eric Covener&amp;lt;covener@gmail.com&amp;gt; wrote: &amp;gt; On Tue, Jun 30, 2009 at 12:10 AM, Toad</description>
<pubDate>29 Jun  2009 22:19:17 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369939</link>
</item><item>
<title>Re: Creating a new thread inside a module</title>
<description>William A. Rowe, Jr. wrote: &amp;gt;&amp;gt; However it requires to be statically compiled so it &amp;gt;&amp;gt; can survive the child death. &amp;gt; &amp;gt; *That&amp;#039;s* the reason for static</description>
<pubDate>29 Jun  2009 22:09:31 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369938</link>
</item><item>
<title>Re: protocol for reporting bug that &amp;#039;may&amp;#039; be considered exploit</title>
<description>On Tue, Jun 30, 2009 at 12:10 AM, Toadie&amp;lt;toadie643@gmail.com&amp;gt; wrote: &amp;gt; Hello, &amp;gt; &amp;gt; I think we may have discovered an issue with mod_proxy that &amp;#039;could&amp;#039;</description>
<pubDate>29 Jun  2009 21:24:19 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369937</link>
</item><item>
<title>protocol for reporting bug that &amp;#039;may&amp;#039; be considered exploit</title>
<description>Hello, I think we may have discovered an issue with mod_proxy that &amp;#039;could&amp;#039; be used as an exploit to render an Apache server useless. I normally repo</description>
<pubDate>29 Jun  2009 21:10:42 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369936</link>
</item><item>
<title>Re: Creating a new thread inside a module</title>
<description>Hi Mladen Turk, Thank you very much. I roughly gone throug the mod_watchdog. I create my background thread inside the balancer_init method at mod_p</description>
<pubDate>29 Jun  2009 15:08:37 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369929</link>
</item><item>
<title>Re: Creating a new thread inside a module</title>
<description>Mladen Turk wrote: &amp;gt; &amp;gt; Take a look at trunk&amp;#039;s mod_watchdog. &amp;gt; It should compile with 2.2 without a problem. &amp;gt; However it requires to be statically co</description>
<pubDate>29 Jun  2009 13:47:12 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369924</link>
</item><item>
<title>Re: Creating a new thread inside a module</title>
<description>h iroshan wrote: &amp;gt; Hi All &amp;gt; Actually I need *to* modify *Apache* and *run* one custom background &amp;gt; *thread*. In addition, my custom modules have *to*</description>
<pubDate>29 Jun  2009 13:23:48 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369923</link>
</item><item>
<title>Re: Creating a new thread inside a module</title>
<description>Hi All Actually I need *to* modify *Apache* and *run* one custom background *thread *. In addition, my custom modules have *to* be able *to* access th</description>
<pubDate>29 Jun  2009 12:47:22 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369922</link>
</item><item>
<title>Re: Creating a new thread inside a module</title>
<description>Hi Mladen Turk, Thank you .In Apache 2.2.x trunk there is no such a module mod_watchdog. Is this is from later version?. Can I compile this in DSO mo</description>
<pubDate>29 Jun  2009 10:25:12 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369919</link>
</item><item>
<title>Re: A modest proposal, was Re: Mitigating the Slowloris DoS attack</title>
<description>On Jun 23, 2009, at 8:39 PM, Akins, Brian wrote: &amp;gt; On 6/23/09 12:48 AM, &amp;quot;Paul Querna&amp;quot; &amp;lt;paul@querna.org&amp;gt; wrote: &amp;gt; &amp;gt;&amp;gt; Mitagation is the wrong approach.</description>
<pubDate>29 Jun  2009 10:09:44 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369916</link>
</item><item>
<title>Re: Mitigating the Slowloris DoS attack</title>
<description>On Jun 24, 2009, at 5:18 AM, Joe Orton wrote: &amp;gt; &amp;gt; Regardless, the only thing I&amp;#039;ve ever wanted to see changed in the  &amp;gt; server &amp;gt; which would somewhat</description>
<pubDate>29 Jun  2009 10:08:15 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369915</link>
</item><item>
<title>Re: mod_noloris: mitigating against slowloris-style attack</title>
<description>On Jun 25, 2009, at 11:12 AM, William A. Rowe, Jr. wrote: &amp;gt; Nick Kew wrote: &amp;gt;&amp;gt; &amp;gt;&amp;gt; Is this worth hacking up, or more trouble than it saves? &amp;gt; &amp;gt; It alr</description>
<pubDate>29 Jun  2009 10:05:46 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369914</link>
</item><item>
<title>Re: Using slotmem in /mod_lbmethod_heartbeat/mod_heartmonitor</title>
<description>On Jun 24, 2009, at 8:54 AM, jean-frederic clere wrote: &amp;gt; Paul Querna wrote: &amp;gt;&amp;gt; On Tue, Jun 23, 2009 at 5:35 AM, jean-frederic clere&amp;lt;jfclere@gmail.co</description>
<pubDate>29 Jun  2009 09:47:03 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369913</link>
</item><item>
<title>Re: Creating a new thread inside a module</title>
<description>h iroshan wrote: &amp;gt; Hi All, &amp;gt; &amp;gt; I want to open a port to communicate my Apache hhtpd (2.2) with small &amp;gt; software run on a separate machine .Without a</description>
<pubDate>29 Jun  2009 09:32:05 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369912</link>
</item><item>
<title>Creating a new thread inside a module</title>
<description>Hi All, I want to open a port to communicate my Apache hhtpd (2.2) with small software run on a separate machine .Without affecting the httpd how can</description>
<pubDate>29 Jun  2009 09:01:53 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369911</link>
</item><item>
<title>Re: httpd initd daemon</title>
<description>many thanks it is working. Graham Dumpleton-2 wrote: &amp;gt; &amp;gt; 2009/6/29 Yahav &amp;lt;biran@lucent.com&amp;gt;: &amp;gt;&amp;gt; &amp;gt;&amp;gt; i would like to set the httpd instance to run as</description>
<pubDate>29 Jun  2009 05:18:24 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369904</link>
</item><item>
<title>Re: httpd initd daemon</title>
<description>many thanks Graham Dumpleton-2 wrote: &amp;gt; &amp;gt; 2009/6/29 Yahav &amp;lt;biran@lucent.com&amp;gt;: &amp;gt;&amp;gt; &amp;gt;&amp;gt; i would like to set the httpd instance to run as standard linux</description>
<pubDate>29 Jun  2009 05:17:59 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369903</link>
</item><item>
<title>Re: httpd initd daemon</title>
<description>2009/6/29 Yahav &amp;lt;biran@lucent.com&amp;gt;: &amp;gt; &amp;gt; i would like to set the httpd instance to run as standard linux daemon. the &amp;gt; daemon should be controlled by t</description>
<pubDate>29 Jun  2009 03:04:02 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369899</link>
</item><item>
<title>httpd initd daemon</title>
<description>i would like to set the httpd instance to run as standard linux daemon. the daemon should be controlled by the init daemon. the problem is that the ap</description>
<pubDate>29 Jun  2009 02:38:55 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369898</link>
</item><item>
<title>Bug report for Apache httpd-2 [2009/06/28]</title>
<description>+---------------------------------------------------------------------------+ | Bugzilla Bug ID</description>
<pubDate>28 Jun  2009 23:08:25 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369894</link>
</item><item>
<title>Bug report for Apache httpd-1.3 [2009/06/28]</title>
<description>+---------------------------------------------------------------------------+ | Bugzilla Bug ID</description>
<pubDate>28 Jun  2009 23:08:24 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369893</link>
</item><item>
<title>mod_deflate DoS</title>
<description>Hi, we have received a bug report [1] that a DoS is possible with mod_deflate since it does not stop to compress large files even after the network</description>
<pubDate>28 Jun  2009 11:20:20 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369889</link>
</item><item>
<title>Re: [PATCH] Fix typo in ap_mmn.h</title>
<description>Hi, Arfrever Frehtes Taifersar Arahesis schrieb: &amp;gt; I&amp;#039;m attaching the patch which fixes a typo in ap_mmn.h. thanks, fixed in trunk and 2.2 branch. Gün</description>
<pubDate>27 Jun  2009 10:01:14 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369878</link>
</item><item>
<title>[PATCH] Fix typo in ap_mmn.h</title>
<description>I&amp;#039;m attaching the patch which fixes a typo in ap_mmn.h. -- Arfrever Frehtes Taifersar Arahesis</description>
<pubDate>27 Jun  2009 08:28:33 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369877</link>
</item><item>
<title>Re: DO NOT REPLY [Bug 47392] &amp;lt;FilesMatch&amp;gt; is using the wrong directory</title>
<description>This is a discussion not a bugfix (yet) :) bugzilla@apache.org wrote: &amp;gt; https://issues.apache.org/bugzilla/show_bug.cgi?id=47392 &amp;gt; &amp;gt; --- Comment #4</description>
<pubDate>26 Jun  2009 10:54:12 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369845</link>
</item><item>
<title>mod_ssl / ssl_engine_ocsp.c customizations</title>
<description>Dear list, as I am new to this list, I don&amp;#039;t know but hope questions regarding mod_ssl are welcome? I am currently working on - dirty, please have m</description>
<pubDate>26 Jun  2009 06:55:27 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369836</link>
</item><item>
<title>Re: mod_noloris: mitigating against slowloris-style attack</title>
<description>Stefan Fritsch wrote: &amp;gt; Nick Kew wrote: &amp;gt;&amp;gt; Is this worth hacking up, or more trouble than it saves? &amp;gt; &amp;gt; It seems it already exists (I haven&amp;#039;t tested</description>
<pubDate>25 Jun  2009 12:48:34 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369811</link>
</item><item>
<title>Re: mod_noloris: mitigating against slowloris-style attack</title>
<description>On 06/25/2009 04:19 PM, Nick Kew wrote: &amp;gt; Plüm, Rüdiger, VF-Group wrote: &amp;gt; &amp;gt;&amp;gt;&amp;gt; Is this worth hacking up, or more trouble than it saves? &amp;gt;&amp;gt; &amp;gt;&amp;gt; I guess</description>
<pubDate>25 Jun  2009 10:43:53 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369808</link>
</item><item>
<title>Re: mod_noloris: mitigating against slowloris-style attack</title>
<description>On 06/25/2009 04:01 PM, Plüm, Rüdiger, VF-Group wrote: &amp;gt;  &amp;gt; &amp;gt;&amp;gt; -----Ursprüngliche Nachricht----- &amp;gt;&amp;gt; Von: Nick Kew &amp;gt;&amp;gt; Gesendet: Donnerstag, 25. Juni</description>
<pubDate>25 Jun  2009 10:38:08 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369807</link>
</item><item>
<title>Re: mod_noloris: mitigating against slowloris-style attack</title>
<description>Nick Kew wrote: &amp;gt; &amp;gt; How would you keep an index keyed on client-IP using scoreboard? &amp;gt; Or did you have something else in mind? Exactly; this could n</description>
<pubDate>25 Jun  2009 09:53:46 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369797</link>
</item><item>
<title>Re: mod_noloris: mitigating against slowloris-style attack</title>
<description>On 25 Jun 2009, at 16:12, William A. Rowe, Jr. wrote: &amp;gt; Nick Kew wrote: &amp;gt;&amp;gt; &amp;gt;&amp;gt; Is this worth hacking up, or more trouble than it saves? &amp;gt; &amp;gt; It already</description>
<pubDate>25 Jun  2009 09:06:39 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369796</link>
</item><item>
<title>Re: mod_noloris: mitigating against slowloris-style attack</title>
<description>Nick Kew wrote: &amp;gt; &amp;gt; Is this worth hacking up, or more trouble than it saves? It already lives in /repos/asf/httpd/mod_ftp/trunk/modules/ftp/ ... see</description>
<pubDate>25 Jun  2009 08:12:25 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369790</link>
</item><item>
<title>Re: mod_noloris: mitigating against slowloris-style attack</title>
<description>Nick Kew wrote: &amp;gt; Is this worth hacking up, or more trouble than it saves? It seems it already exists (I haven&amp;#039;t tested it, though): ftp://ftp.monsho</description>
<pubDate>25 Jun  2009 07:45:38 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369789</link>
</item><item>
<title>Re: mod_noloris: mitigating against slowloris-style attack</title>
<description>Plüm, Rüdiger, VF-Group wrote: &amp;gt;&amp;gt; Is this worth hacking up, or more trouble than it saves? &amp;gt; &amp;gt; I guess the approach is good, but there are already m</description>
<pubDate>25 Jun  2009 07:19:25 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369788</link>
</item><item>
<title>Re: mod_noloris: mitigating against slowloris-style attack</title>
<description>&amp;gt; -----Ursprüngliche Nachricht----- &amp;gt; Von: Nick Kew &amp;gt; Gesendet: Donnerstag, 25. Juni 2009 15:40 &amp;gt; An: dev@httpd.apache.org &amp;gt; Betreff: mod_noloris: mi</description>
<pubDate>25 Jun  2009 07:01:29 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369787</link>
</item><item>
<title>Re: mod_noloris: mitigating against slowloris-style attack</title>
<description>On Thu, Jun 25, 2009 at 9:39 AM, Nick Kew&amp;lt;nick@webthing.com&amp;gt; wrote: &amp;gt; Is this worth hacking up, or more trouble than it saves? I think an ultra-simp</description>
<pubDate>25 Jun  2009 06:57:29 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369786</link>
</item><item>
<title>mod_noloris: mitigating against slowloris-style attack</title>
<description>I was just thinking about a quick&amp;amp;dirty fix we could offer to admins who are suddenly concerned about DoS attack. The following, backed by dbm or mem</description>
<pubDate>25 Jun  2009 06:39:50 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369785</link>
</item><item>
<title>Re: Client authentication and authorization using client certificates</title>
<description>Eric Covener wrote: &amp;gt; On Tue, Jun 16, 2009 at 5:40 PM, Johannes MÃ¼ller&amp;lt;joh_m@gmx.de&amp;gt; wrote: &amp;gt;  &amp;gt;&amp;gt; Yes should be no problem. Relicensing means I&amp;#039;ll</description>
<pubDate>24 Jun  2009 14:52:50 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369762</link>
</item><item>
<title>Re: Please Review! Path for os/win32/os.h - new reports Win64 when build for 64-bit</title>
<description>I thought I did but couldn&amp;#039;t find it. I&amp;#039;ve create a new bug report: https://issues.apache.org/bugzilla/show_bug.cgi?id=47418 ~Jorge  On Wed, Jun 24</description>
<pubDate>24 Jun  2009 13:00:49 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369757</link>
</item><item>
<title>Re: Using slotmem in /mod_lbmethod_heartbeat/mod_heartmonitor</title>
<description>Paul Querna wrote: &amp;gt; On Tue, Jun 23, 2009 at 5:35 AM, jean-frederic clere&amp;lt;jfclere@gmail.com&amp;gt; wrote: &amp;gt;&amp;gt; Hi, &amp;gt;&amp;gt; &amp;gt;&amp;gt; I plan to use slotmem (additionally t</description>
<pubDate>24 Jun  2009 05:54:46 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369743</link>
</item><item>
<title>Re: Mitigating the Slowloris DoS attack</title>
<description>2009/6/24 Kevin J Walters &amp;lt;Kevin.Walters@morganstanley.com&amp;gt;: &amp;gt; &amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt; &amp;quot;M&amp;quot; == Matthieu Estrade &amp;lt;mestrade@apache.org&amp;gt; writes: &amp;gt; &amp;gt; M&amp;gt; More granular timeo</description>
<pubDate>24 Jun  2009 02:57:58 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369740</link>
</item><item>
<title>Re: Mitigating the Slowloris DoS attack</title>
<description>&amp;gt;&amp;gt;&amp;gt;&amp;gt;&amp;gt; &amp;quot;M&amp;quot; == Matthieu Estrade &amp;lt;mestrade@apache.org&amp;gt; writes: M&amp;gt; More granular timeout and maybe adaptative timeout is also IMHO a good M&amp;gt; way to impro</description>
<pubDate>24 Jun  2009 02:40:28 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369739</link>
</item><item>
<title>Re: Mitigating the Slowloris DoS attack</title>
<description>* Joe Orton &amp;lt;jorton@redhat.com&amp;gt; [2009-06-24 11:20]: &amp;gt;Meh. There will always be a maximum to the number of concurrent &amp;gt;connections a server can handl</description>
<pubDate>24 Jun  2009 02:36:21 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369738</link>
</item><item>
<title>Re: Mitigating the Slowloris DoS attack</title>
<description>I totally agree with you. This first point the lack of tunning of httpd.conf, this kind of attack crash default setup of httpd.conf but a well setup</description>
<pubDate>24 Jun  2009 02:32:08 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369737</link>
</item><item>
<title>Re: Mitigating the Slowloris DoS attack</title>
<description>The problem could happen also if a CL is sent and not enough data is posted. So i don&amp;#039;t think control for complete headers will solve the entire probl</description>
<pubDate>24 Jun  2009 02:23:52 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369736</link>
</item><item>
<title>Re: Mitigating the Slowloris DoS attack</title>
<description>On Mon, Jun 22, 2009 at 09:48:46PM -0700, Paul Querna wrote: &amp;gt; On Sun, Jun 21, 2009 at 4:10 AM, Andreas Krennmair&amp;lt;ak@synflood.at&amp;gt; wrote: &amp;gt; &amp;gt; Hello eve</description>
<pubDate>24 Jun  2009 02:18:59 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369734</link>
</item><item>
<title>Re: Mitigating the Slowloris DoS attack</title>
<description>&amp;gt; -----Ursprüngliche Nachricht----- &amp;gt; Von: Graham Leggett &amp;gt; Gesendet: Mittwoch, 24. Juni 2009 10:05 &amp;gt; An: dev@httpd.apache.org &amp;gt; Betreff: Re: Mitigat</description>
<pubDate>24 Jun  2009 01:29:00 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369733</link>
</item><item>
<title>Re: Mitigating the Slowloris DoS attack</title>
<description>Dirk-Willem van Gulik wrote: &amp;gt; So what we did in the mid &amp;#039;90 when we where hit by pretty much the same &amp;gt; was a bit simpler - any client which did not</description>
<pubDate>24 Jun  2009 01:05:17 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369732</link>
</item><item>
<title>Re: Mitigating the Slowloris DoS attack</title>
<description>Akins, Brian wrote: &amp;gt; On 6/22/09 10:40 PM, &amp;quot;Weibin Yao&amp;quot;&amp;lt;nbubingo@gmail.com&amp;gt; wrote: &amp;gt; &amp;gt;&amp;gt; I have an idea to mitigate the problem: put the Nginx as a re</description>
<pubDate>24 Jun  2009 00:54:13 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369731</link>
</item><item>
<title>A modest proposal, was Re: Mitigating the Slowloris DoS attack</title>
<description>On 6/23/09 12:48 AM, &amp;quot;Paul Querna&amp;quot; &amp;lt;paul@querna.org&amp;gt; wrote: &amp;gt; Mitagation is the wrong approach. &amp;gt; &amp;gt; We all know our architecture is wrong. Another</description>
<pubDate>23 Jun  2009 17:39:54 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369729</link>
</item><item>
<title>Re: Mitigating the Slowloris DoS attack</title>
<description>On 6/22/09 10:40 PM, &amp;quot;Weibin Yao&amp;quot; &amp;lt;nbubingo@gmail.com&amp;gt; wrote:  &amp;gt; I have an idea to mitigate the problem: put the Nginx as a reverse proxy &amp;gt; server in</description>
<pubDate>23 Jun  2009 17:26:43 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369728</link>
</item><item>
<title>PR 38330: Make RemoveType override TypesConfig mime.types?</title>
<description>On Saturday 20 December 2008, Stefan Fritsch wrote: &amp;gt; for people who use a system wide mime.types as TypesConfig, it &amp;gt; would be nice if there was a wa</description>
<pubDate>23 Jun  2009 13:25:03 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369725</link>
</item><item>
<title>Re: Using slotmem in /mod_lbmethod_heartbeat/mod_heartmonitor</title>
<description>On Tue, Jun 23, 2009 at 5:35 AM, jean-frederic clere&amp;lt;jfclere@gmail.com&amp;gt; wrote: &amp;gt; Hi, &amp;gt; &amp;gt; I plan to use slotmem (additionally to the actual file based</description>
<pubDate>23 Jun  2009 13:11:54 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369724</link>
</item><item>
<title>Re: testing for connections with keep-alive property from modules</title>
<description>Kevin J Walters &amp;lt;Kevin.Walters@morganstanley.com&amp;gt; writes: &amp;gt; What&amp;#039;s the recommended way to check for a connection having the &amp;gt; property of being kept</description>
<pubDate>23 Jun  2009 08:20:03 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369708</link>
</item><item>
<title>testing for connections with keep-alive property from modules</title>
<description>Hi, What&amp;#039;s the recommended way to check for a connection having the property of being kept alive? I was expecting to see tests like c-&amp;gt;keepalive ==</description>
<pubDate>23 Jun  2009 06:51:25 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369707</link>
</item><item>
<title>Using slotmem in /mod_lbmethod_heartbeat/mod_heartmonitor</title>
<description>Hi, I plan to use slotmem (additionally to the actual file based logic) in the heartbeat logic. HeartbeatStorage mem:logs/hb.dat (slotmem and key/sa</description>
<pubDate>23 Jun  2009 05:35:17 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369691</link>
</item><item>
<title>Re: Mitigating the Slowloris DoS attack</title>
<description>On Mon, Jun 22, 2009 at 9:07 PM, Graham Dumpleton&amp;lt;graham.dumpleton@gmail.com&amp;gt; wrote: &amp;gt; 2009/6/23 Weibin Yao &amp;lt;nbubingo@gmail.com&amp;gt;: &amp;gt;&amp;gt; William A. Rowe,</description>
<pubDate>22 Jun  2009 21:51:56 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369676</link>
</item><item>
<title>Re: Mitigating the Slowloris DoS attack</title>
<description>On Sun, Jun 21, 2009 at 4:10 AM, Andreas Krennmair&amp;lt;ak@synflood.at&amp;gt; wrote: &amp;gt; Hello everyone, ..... &amp;gt; The basic principle is that the timeout for new co</description>
<pubDate>22 Jun  2009 21:48:46 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369675</link>
</item><item>
<title>Re: Mitigating the Slowloris DoS attack</title>
<description>2009/6/23 Weibin Yao &amp;lt;nbubingo@gmail.com&amp;gt;: &amp;gt; William A. Rowe, Jr. at 2009-6-23 2:00 wrote: &amp;gt;&amp;gt; &amp;gt;&amp;gt; Andreas Krennmair wrote: &amp;gt;&amp;gt; &amp;gt;&amp;gt;&amp;gt; &amp;gt;&amp;gt;&amp;gt; * Guenter Knauf &amp;lt;</description>
<pubDate>22 Jun  2009 21:07:09 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369674</link>
</item><item>
<title>Re: Mitigating the Slowloris DoS attack</title>
<description>William A. Rowe, Jr. at 2009-6-23 2:00 wrote: &amp;gt; Andreas Krennmair wrote: &amp;gt;  &amp;gt;&amp;gt; * Guenter Knauf &amp;lt;fuankg@apache.org&amp;gt; [2009-06-22 04:30]: &amp;gt;&amp;gt;   &amp;gt;&amp;gt;&amp;gt; w</description>
<pubDate>22 Jun  2009 19:40:59 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369673</link>
</item><item>
<title>Re: Mitigating the Slowloris DoS attack</title>
<description>Hi, How about coding a module looking how many bytes are read and if there is too little chunk of data, close the connection. Something like a MinDat</description>
<pubDate>22 Jun  2009 14:46:02 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369672</link>
</item><item>
<title>Re: build mod_proxy by source</title>
<description>Look: $ ~/micex/opt/httpd-worker/bin/apxs -c -o mod_proxy.so mod_proxy.c proxy_util.c /home/marko/micex/opt/httpd-worker/build/libtool --silent --mod</description>
<pubDate>22 Jun  2009 14:43:29 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369671</link>
</item><item>
<title>Re: [Fwd: Slowloris]</title>
<description>On Mon, Jun 22, 2009 at 02:23:12PM +0200, Dirk-Willem van Gulik wrote: &amp;gt;&amp;gt;&amp;gt; -  Seriously rewrite apache/add a worker which mimics the &amp;gt;&amp;gt;&amp;gt; accept_filt</description>
<pubDate>22 Jun  2009 13:46:21 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369665</link>
</item><item>
<title>Re: build mod_proxy by source</title>
<description>hi Kevac Marko, apxs -c -o mod_proxy.so mod_proxy.c proxy_util.c above command not generate mod_proxy.so . Please help me Regards Iroshan</description>
<pubDate>22 Jun  2009 13:14:23 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369664</link>
</item><item>
<title>Re: build mod_proxy by source</title>
<description>hi Kevac Marko, Thank you very much.</description>
<pubDate>22 Jun  2009 13:06:14 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369663</link>
</item><item>
<title>Re: build mod_proxy by source</title>
<description>apxs -c -o mod_proxy.so mod_proxy.c proxy_util.c On Mon, Jun 22, 2009 at 11:00 PM, h iroshan &amp;lt;iroshanmail@gmail.com&amp;gt; wrote: &amp;gt; Hi All, &amp;gt; &amp;gt; I need to</description>
<pubDate>22 Jun  2009 12:55:15 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/apache/dev/369662</link>
</item>
</channel>
</rss>
