Pattern matching odd HTTP request

E.B. Dreger eddy+public+spam at noc.everquick.net
Wed Sep 19 01:21:21 UTC 2001


> Date: Tue, 18 Sep 2001 18:58:42 -0400
> From: Bill McGonigle <mcgonigle at medicalmedia.com>

[ snip ]

> On Apache 1.3, this brings the number of httpd processes up to 

[ snip ]

Jake, what server OS?  Iff FreeBSD >= 4.0, check out the man page
for accf_http(9).  Consider hacking Ap to use it... accept(2)
won't even see the connection until the socket is valid.  I don't
know what the timeout is, but that'll help prevent Ap from
forking just to generate 408s.

Disclaimer:

I've not used accf_http on Ap.  It seems to work well on some R&D
work that I've done, although I've not tested the stock accf_http
extensively.


Eddy

---------------------------------------------------------------------------
Brotsman & Dreger, Inc. - EverQuick Internet Division
Phone: +1 (316) 794-8922 Wichita/(Inter)national
Phone: +1 (785) 865-5885 Lawrence
---------------------------------------------------------------------------

Date: Mon, 21 May 2001 11:23:58 +0000 (GMT)
From: A Trap <blacklist at brics.com>
To: blacklist at brics.com
Subject: Please ignore this portion of my mail signature.

These last few lines are a trap for address-harvesting spambots.  Do NOT
send mail to <blacklist at brics.com>, or you are likely to be blocked.




More information about the NANOG mailing list