Hello!
Just wanted to give you a notice that the apache 2.2.15 is missing
options for enabling the new mod_reqtimeout module.
That module can be used to lessen the impact of a slow loris attack,
wich makes it kind of nice to have.
The attached small patch makes it available, and selected by default.
Regards
/Jonas
--
Jonas Eckerman
Förbundet Sveriges Dövblinda
http://www.fsdb.org/
http://whatever.frukt.org/
diff -u ./Makefile.modules ../new/Makefile.modules
--- ./Makefile.modules 2010-05-20 13:06:34.000000000 +0200
+++ ../new/Makefile.modules 2010-05-20 13:06:56.000000000 +0200
@@ -30,7 +30,8 @@
cgi charset_lite dbd deflate dir dumpio env expires \
headers imagemap include info log_config logio mime \
mime_magic negotiation rewrite setenvif speling status \
- unique_id userdir usertrack vhost_alias filter version
+ unique_id userdir usertrack vhost_alias filter version \
+ reqtimeout
PROXY_MODULES= proxy proxy_connect proxy_ftp proxy_http proxy_ajp
proxy_balancer proxy_scgi
SSL_MODULES= ssl
SUEXEC_MODULES= suexec
diff -u ./Makefile.options ../new/Makefile.options
--- ./Makefile.options 2010-05-20 13:06:34.000000000 +0200
+++ ../new/Makefile.options 2010-05-20 13:06:56.000000000 +0200
@@ -73,5 +73,6 @@
SSL "Enable mod_ssl" ON \
SUEXEC "Enable mod_suexec" OFF \
SUEXEC_RSRCLIMIT "SuEXEC rlimits based on login class" OFF \
+ REQTIMEOUT "Enable mod_reqtimeout" ON \
CGID "Enable mod_cgid" OFF \
_______________________________________________
freebsd-ports@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscr...@freebsd.org"
