You are viewing a plain text version of this content. The canonical link for it is here.

Posted to bugs@httpd.apache.org by bu...@apache.org on 2014/07/20 20:30:57 UTC

[Bug 56751] Fails to properly mitigate Slow Post DoS attack

https://issues.apache.org/bugzilla/show_bug.cgi?id=56751

Eric Covener <co...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |NEEDINFO

--- Comment #1 from Eric Covener <co...@gmail.com> ---
http://httpd.apache.org/docs/2.4/mod/mod_reqtimeout.html

The first and fourth examples in the manual use a maxtimeout on the body (if
I'm understanding the syntax correctly). 

Net, if you want a maxtimeout, you have to configure one. 

Is it the manual you want updated? 
Or some default configuration? 
Or the way the module behaves if you load it and don't configure it at all?

Do you have an argument for a reasonable (doesn't break normal clients) and
effective (actual benefit to a client that reconnects) body maxtimeout?

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org