Re: JK2 Connector and denial of service attacks

2004-04-02 Thread Steve Spicer
At 10:36 PM 29/03/2004, you wrote: Henri Gomez wrote: Steve Spicer wrote: On standard install it doesn't. I'm not sure why but it still seems the JK connector is connecting to tomcat even though the access checker hook is returning a 403. Any ideas? I will make some tests on it. I make some t

Re: JK2 Connector and denial of service attacks

2004-03-29 Thread Henri Gomez
Henri Gomez wrote: Steve Spicer wrote: On standard install it doesn't. I'm not sure why but it still seems the JK connector is connecting to tomcat even though the access checker hook is returning a 403. Any ideas? I will make some tests on it. I make some tests and I didn't see such proble

Re: JK2 Connector and denial of service attacks

2004-03-29 Thread Henri Gomez
Steve Spicer wrote: On standard install it doesn't. I'm not sure why but it still seems the JK connector is connecting to tomcat even though the access checker hook is returning a 403. Any ideas? I will make some tests on it. -

Re: JK2 Connector and denial of service attacks

2004-03-29 Thread Steve Spicer
On standard install it doesn't. I'm not sure why but it still seems the JK connector is connecting to tomcat even though the access checker hook is returning a 403. Any ideas? At 09:51 PM 29/03/2004, you wrote: Steve Spicer wrote: I agree to your point that DoS protection is out of the scope o

Re: JK2 Connector and denial of service attacks

2004-03-29 Thread Henri Gomez
Steve Spicer wrote: I agree to your point that DoS protection is out of the scope of the connector, I figured though that it would automatically protect tomcat against such attacks in the common httpd / tomcat / jk2 configuration, I'm not sure if I was a clutz in missing this need for protection

Re: JK2 Connector and denial of service attacks

2004-03-29 Thread Steve Spicer
I agree to your point that DoS protection is out of the scope of the connector, I figured though that it would automatically protect tomcat against such attacks in the common httpd / tomcat / jk2 configuration, I'm not sure if I was a clutz in missing this need for protection, if so then this p

Re: JK2 Connector and denial of service attacks

2004-03-29 Thread Henri Gomez
Steve Spicer wrote: Hey, I've been having some serious problems with brute force denail of service attacks on httpd with tomcat 4 and jk2. After sitting down and working out the desired point of redirection I found the mod_dos module which effectively refuses traffic for these attacks, however

JK2 Connector and denial of service attacks

2004-03-28 Thread Steve Spicer
Hey, I've been having some serious problems with brute force denail of service attacks on httpd with tomcat 4 and jk2. After sitting down and working out the desired point of redirection I found the mod_dos module which effectively refuses traffic for these attacks, however after installing t