111 reputation
4
bio website
location
age
visits member for 3 years
seen Apr 19 '13 at 9:54

Oct
5
comment Tomcat denial of service
We have installed nginx now but get now a strange ABE warning from within Firefox/Noscript: Request { GET http://localhost/.... <<< http://our-domain.com/...., http://our-domain.com/foo/bar - 6} filtered by ABE: <LOCAL> Deny. What could this mean?
Oct
3
comment Tomcat denial of service
When using nginx as pure proxy to tomcat (i.e. all requests, even to our download files will be forwarded to tomcat), can nginx still protect us from slowloris-like attacks, Apache CVE-2011-3192-like attacks, ...?
Oct
1
comment Tomcat denial of service
You said, this issue is reported against Apache, but we are not using Apache, but only Tomcat. Would your suggestion mean to disallow downloads using a download manager which usually downloads multiple segments of a file at one time?
Sep
30
comment Tomcat denial of service
We have just now updated logging, so I can't provide any details on request headers, but just the following: attack was performed from only one IP address and worked by requesting always the same binary file in regular intervals, sometimes multiple requests per seconds, sometimes a pause of a couple seconds. Tomcat has logged sent byte count between 18 and 32K and HTTP status code 206.
Sep
30
comment Tomcat denial of service
What do you think is easier to set up - Apache or nginx?