Re: slowloris, accf_http and POST requests

2009-06-23 Thread Ruben de Groot
On Tue, Jun 23, 2009 at 05:23:19PM +0200, Fabian Keil typed: > Ruben de Groot wrote: > > > On Mon, Jun 22, 2009 at 05:35:56PM -0500, Dan Nelson typed: > > > In the last episode (Jun 22), Ruben de Groot said: > > > > > > > > My main concern here is if applying the trivial patch I posted would > >

Re: slowloris, accf_http and POST requests

2009-06-23 Thread Fabian Keil
Ruben de Groot wrote: > On Mon, Jun 22, 2009 at 05:35:56PM -0500, Dan Nelson typed: > > In the last episode (Jun 22), Ruben de Groot said: > > > > > > My main concern here is if applying the trivial patch I posted would > > > break anything in the http protocol layer. And if not, why isn't the >

Re: slowloris, accf_http and POST requests

2009-06-23 Thread Michael Powell
Ruben de Groot wrote: > On Mon, Jun 22, 2009 at 05:35:56PM -0500, Dan Nelson typed: >> In the last episode (Jun 22), Ruben de Groot said: >> > >> > My main concern here is if applying the trivial patch I posted would >> > break anything in the http protocol layer. And if not, why isn't the >> > P

Re: slowloris, accf_http and POST requests

2009-06-23 Thread Ruben de Groot
On Mon, Jun 22, 2009 at 05:35:56PM -0500, Dan Nelson typed: > In the last episode (Jun 22), Ruben de Groot said: > > > > My main concern here is if applying the trivial patch I posted would break > > anything in the http protocol layer. And if not, why isn't the POST method > > included in the htt

Re: slowloris, accf_http and POST requests

2009-06-22 Thread Dan Nelson
In the last episode (Jun 22), Ruben de Groot said: > On Mon, Jun 22, 2009 at 08:45:23AM -0700, Norbert Papke typed: > > On June 22, 2009, Ruben de Groot wrote: > > > Can enybody explain why the http accept filter only works on GET/HEAD > > > requests? > > > > > > The reason I ask is I was checking

Re: slowloris, accf_http and POST requests

2009-06-22 Thread Ruben de Groot
On Mon, Jun 22, 2009 at 08:45:23AM -0700, Norbert Papke typed: > On June 22, 2009, Ruben de Groot wrote: > > Can enybody explain why the http accept filter only works on GET/HEAD > > requests? > > > > The reason I ask is I was checking up on the slowloris DOS tool > > (http://ha.ckers.org/slowloris

Re: slowloris, accf_http and POST requests

2009-06-22 Thread Norbert Papke
On June 22, 2009, Ruben de Groot wrote: > Can enybody explain why the http accept filter only works on GET/HEAD > requests? > > The reason I ask is I was checking up on the slowloris DOS tool > (http://ha.ckers.org/slowloris/slowloris.pl) and, like others before me, > found that the -httpready swit

slowloris, accf_http and POST requests

2009-06-22 Thread Ruben de Groot
Hi, Can enybody explain why the http accept filter only works on GET/HEAD requests? The reason I ask is I was checking up on the slowloris DOS tool (http://ha.ckers.org/slowloris/slowloris.pl) and, like others before me, found that the -httpready switch (which uses POST instead of GET) renders