up vote 0 down vote favorite
share [g+] share [fb]

I have an apache server, and there are lots of connection opened by a user, and it never ends. Already ran for 4886 seconds and keeps counting. There are 80 such requests.

The page is simple, and not a download page.

So I have two questions:

  • What is the reasonable time to set for apache for: sending reply?
  • How to set this for the apache2?
link|improve this question
67% accept rate
you need to use iptables to block this users ip address, your under a DOS attack. – The Unix Janitor Feb 9 at 15:57
What do the requests look like? What's recorded in the access log? – Shane Madden Feb 9 at 16:23
They are fine HTTP1.1 access. It was not a DOS attack, it was from a known user. – Pentium10 Feb 9 at 19:29
feedback

1 Answer

up vote 0 down vote

You're probably running an apache version prior to 2.2.21, which means you are vulnerable to the HTTP Range exploit documented in CVE-2011-3192 - please read that document on how to remedy.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.