0

I have an apache server, and there are lots of connection opened by a user, and it never ends. Already ran for 4886 seconds and keeps counting. There are 80 such requests.

The page is simple, and not a download page.

So I have two questions:

  • What is the reasonable time to set for apache for: sending reply?
  • How to set this for the apache2?
Improve this question
3
  • you need to use iptables to block this users ip address, your under a DOS attack.
    – The Unix Janitor
    Feb 9, 2012 at 15:57
  • What do the requests look like? What's recorded in the access log?
    – Shane Madden
    Feb 9, 2012 at 16:23
  • They are fine HTTP1.1 access. It was not a DOS attack, it was from a known user.
    – Pentium10
    Feb 9, 2012 at 19:29

1 Answer 1

Reset to default
1

You're probably running an apache version prior to 2.2.21, which means you are vulnerable to the HTTP Range exploit documented in CVE-2011-3192 - please read that document on how to remedy.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .