Your message dated Sun, 23 May 2010 21:37:31 +0300
with message-id <[email protected]>
has caused the report #582799,
regarding dicod: the 'all' strategy is dangerous for a production server !
to be marked as having been forwarded to the upstream software
author(s) "=?utf-8?B?2KPYrdmF2K8g2KfZhNmF2K3ZhdmI2K/Zig==?="
<[email protected]>
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
582799: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=582799
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
ãí¥ï ç¤¥í¥¨ïª <[email protected]> ha escrit:
> > The "Match everything (experimental)" strategy is not suited for
> > production servers, as its name says, and consume all CPU, leading
> > to an easy DOS attack method.
Any implementation of "match everything" strategy is potentially harmful
and certainly not suited for production servers. I thought it was obvious.
> There is no way to deactivate it,
No, there is:
strategy all {
deny-all yes;
}
See the manual, section 3.3.12 "Strategies and Default Searches" [1]
Regards,
Sergey
[1] http://dico.prog.gnu.org.ua/manual/html_section/Configuration.html#SEC29
--- End Message ---
