Mitigating the Slowloris DoS attack

2009-06-21 Thread Andreas Krennmair
Hello everyone, Previously, I had contacted the Apache Security Team about a possible mitigation of the Slowloris DoS attack. I was referred to this mailing list to discuss non-private security issues. For those who are still unaware of the Slowloris attack, it's a denial-of-service attack

Re: Mitigating the Slowloris DoS attack

2009-06-21 Thread Guenter Knauf
Hi Andreas, Andreas Krennmair schrieb: For those who are still unaware of the Slowloris attack, it's a denial-of-service attack that consumes Apache's resources by opening up a great number of parallel connections and slowly sending partial requests, never completing them. Since Apache limits

Re: Mitigating the Slowloris DoS attack

2009-06-21 Thread Graham Dumpleton
2009/6/22 Guenter Knauf fua...@apache.org: Hi Andreas, Andreas Krennmair schrieb: For those who are still unaware of the Slowloris attack, it's a denial-of-service attack that consumes Apache's resources by opening up a great number of parallel connections and slowly sending partial