search for: httpready

Hi list! We tested mod_antiloris 0.4 and found it quite efficient, but before putting it in production, we would like to hear some feedback from freebsd users. We are using Apache 2.2.x on Freebsd 6.2 and 7.2. Is anyone using it? Do you have any other way to patch against Slowloris other than putting a proxy in front or using the HTTP accept filter? Thanks for your feedback, Martin

I seem to have a (recent) problem with mongrel on NetBSD. I''m running a development release of NetBSD (called NetBSD-current 4.99.34). When I start mongrel, it listens on the IPv6 wildcard address, but not on the IPv4 wildcard: => Booting Mongrel (use ''script/server webrick'' to force WEBrick) => Rails application starting on http://0.0.0.0:3000 => Call with

...# Use the HTTP accept filter if available. # The struct made by pack() is defined in /usr/include/sys/socket.h as accept_filter_arg unless `/sbin/sysctl -nq net.inet.accf.http`.empty? $tcp_defer_accept_opts = [Socket::SOL_SOCKET, Socket::SO_ACCEPTFILTER, [''httpready'', nil].pack(''a16a240'')] end end end I''d like to know the following from the FreeBSD crew: 1) Are there any potential malicious potentials to this? I don''t assume any intent, but would like to know if I need to rush out a fix if there...

...1 files changed, 8 insertions(+), 0 deletions(-) diff --git a/examples/nginx.conf b/examples/nginx.conf index 9f245c8..368e19e 100644 --- a/examples/nginx.conf +++ b/examples/nginx.conf @@ -87,6 +87,14 @@ http { # listen 80 default deferred; # for Linux # listen 80 default accept_filter=httpready; # for FreeBSD + # If you have IPv6, you''ll likely want to have two separate listeners. + # One on IPv4 only (the default), and another on IPv6 only instead + # of a single dual-stack listener. A dual-stack listener will make + # $remote_addr will make IPv4 addresses ugly (e...

...# Use the HTTP accept filter if available. + # The struct made by pack() is defined in /usr/include/sys/socket.h as accept_filter_arg + unless `/sbin/sysctl -nq net.inet.accf.http`.empty? + $tcp_defer_accept_opts = [Socket::SOL_SOCKET, Socket::SO_ACCEPTFILTER, [''httpready'', nil].pack(''a16a240'')] + end end end @@ -680,13 +687,13 @@ configure_socket_options - @socket.setsockopt(Socket::SOL_TCP, $tcp_defer_accept_opts[0], $tcp_defer_accept_opts[1]) if $tcp_defer_accept_opts + @socket.setsockopt(*$tcp_...

Hello! Run problems after upgrading to mongrel 1.0.3 from 1.0.1: # uname -sr FreeBSD 7.0-BETA1 # mongrel_rails start ** Starting Mongrel listening at :3000 ** Starting Rails with development environment... ** Rails loaded. ** Loading any Rails specific GemPlugins ** Signals ready. TERM => stop. USR2 => restart. INT => stop (no restart). ** Rails signals registered. HUP => reload

...sr/X11R6/lib /usr/local/lib /usr/local/libdata/ldconfig/mysql 32-bit compatibility ldconfig path: Starting mountd. Starting nfsd. Performing sanity check on apache22 configuration: Syntax OK Starting apache22. [Fri Mar 17 11:15:48 2006] [warn] (2)No such file or directory: Failed to enable the 'httpready' Accept Filter Starting smartd. Mar 17 11:15:49 defweb smartd[413]: In the system's table of devices NO devices found to scan Starting proftpd. Starting local daemons:. Updating motd. Configuring syscons: blanktime. Starting sshd. Initial amd64 initialization:. Additional ABI support:. Star...