At 07:57 PM 09/25/02 +0200, Eric Cholet wrote:
>Yes, looks like someone DoS'd search.apache.org/index.cgi, load went very
>high, which seems to have confused the OS enough to lose knowledge about
>/x2 where the web sites live. The machine was rebooted and things work
>again.

That's my script :-(.

Ask sent in mail about it about 5am PST today.  It's not hard to cause a
DoS by hitting a plain CGI script.  I'd like to move that script to
mod_perl with a very limited number of children and reverse proxy it.  I'm
not sure if Brian wants to go that way or not.  Having a CGI script as
/index.html is an easy thing to hit.

The script has timeout's but nothing long enough to prevent this from
happening.

>Pretty scary...

Scary that it could be an attack?  I've seen the same thing when IE users
just click on off-line browsing....  



-- 
Bill Moseley
mailto:[EMAIL PROTECTED]

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to