similar to: Update on protection against slowloris

Hi, Those who are interested in anti Sloworis solution. I have built and packed mod_antiloris for C4/5. Packages are to be found at: http://fs12.vsb.cz/hrb33/el5/hrb/stable/i386/repoview/mod_antiloris.html http://fs12.vsb.cz/hrb33/el5/hrb/stable/x86_64/repoview/mod_antiloris.html http://fs12.vsb.cz/hrb33/el4/hrb/stable/i386/repoview/mod_antiloris.html

This small patch extends configure_socket_options to support FreeBSD''s accf_http(9), which defers accept() until there''s a full HTTP request to read. Seems to work fine on 6.1-STABLE. DragonflyBSD should work too provided the /freebsd/ line is modified to match it. accf_http(9): http://www.freebsd.org/cgi/man.cgi?query=accf_http&sektion=9 -- Thomas

Hi Guys I'm trying to compile samba the lastest version and i keep getting this same error message. Compiling ipc.c Compiling reply.c Compiling mangle.c Compiling chgpasswd.c Compiling password.c Compiling quotas.c Compiling uid.c Compiling predict.c Compiling credentials.c Compiling clientgen.c Compiling pipes.c Compiling server.c Compiling access.c Compiling ufc.c Compiling smbpass.c cc:

Hi all, I am trying to use puppet (2.7.18) for downgrading varnish cache on Centos Linux (6.3). Unfortunately there are two varnish RPMs (which seem to have circular dependencies): varnish-3.0.4-1.el6.x86_64 varnish-libs-3.0.4-1.el6.x86_64 When using "ensure" for downgrading I get a bunch of errors: err: /Stage[main]/Varnish/Package[varnish-libs]/ensure: change from 3.0.4-1.el6

Hey all, I'm trying to do a find of all files with the phrase 'varnish' in the name, but want to exclude a user home directory called /usr/local/digitalplatform. Here's what I was able to come up with: find / -path '/usr/local/digitalplatform/*' -prune -o -name "*varnish*" Which results in this: [root at uszmpwsls014lb ~]# find / -path

I have the need to know how many connection the server has, i run this command but i don't know how to sum all the results and get a final number. any ideas? netstat -an | grep -E 'tcp|udp' | awk '{print $6}' | sort | uniq -c | sort -n ?? 1 CLOSE_WAIT ?? 1 FIN_WAIT_2 ?? 1 LAST_ACK ?? 1 TIME_WAIT ?? 4 SYN_SENT ? 15 ? 37 LISTEN ? 44 ESTABLISHED

Hi, I use a module (for Varnish in this case) which has the typical install, service, package classes. -- modules/varnish/manifests/install.pp: class varnish::install { package { $varnish::params::package_name: ensure => installed, } } -- modules/project/manifests/proxy.pp class project::proxy { include varnish } -- manifests/site.pp node proxy {

Hi All, I started a 501c3 (not-for-profit) organization back in February 2011 to deal with information archival. A long vision here, I wont bore you with the details (if you really want to know, e-mail me privately) but the gist is I need to build an infrastructure to accommodate about 2PB of data that is database stuff, stored video, crawl data, static data sets, etc. Right now in my testing of

I'm trying to use pf + ftp-proxy n a 6.1-PRERELEASE machine. I have this line on inetd.conf: ftp-proxy stream tcp nowait root /usr/libexec/ftp-proxy ftp-proxy -n And this lines on pf.conf: rdr on $int_if proto tcp from any to any port ftp -> 127.0.0.1 port ftp-proxy pass in quick on $ext_if inet proto tcp from any port ftp-data to $ext_if:0 user proxy flags S/SA keep

Hey, Due to a security issue in the moinmoin wiki software, the FreeBSD wiki will be offline for a bit. I do not yet know if the issue actually has been exploited in the FreeBSD wiki (haven't had the time yet to examine it), but I took the wiki down just in case. Note that even if the software was compromised, it was considered untrusted from the start and as such heavily sandboxed

I seem to have a (recent) problem with mongrel on NetBSD. I''m running a development release of NetBSD (called NetBSD-current 4.99.34). When I start mongrel, it listens on the IPv6 wildcard address, but not on the IPv4 wildcard: => Booting Mongrel (use ''script/server webrick'' to force WEBrick) => Rails application starting on http://0.0.0.0:3000 => Call with

Very bizarre behavior has cropped up in a few spots. # the action for viewing a blog post def posts @post = BlogPost.find_by_slug(params[:id], :include => :commentary) # a breakpoint here shows @post and @post.commentary with appropriate data redirect_to :action => ''archive'' unless @post end # posts.rhtml <%= @post.inspect %> => nil <%= render :partial

A user at a Windows PC uses our SSH client software (Anzio) to access a Linux sshd. User would like the banner from the server to display BEFORE entering a login name. According to the SSH spec, this should be allowed. But the OpenSSH source seems to have specifically prevented this. Is there a good reason for this? Regards, ....Bob Rasmussen, President, Rasmussen Software, Inc.

Hi , what will be if my site traffic became huge , can i separate db server and add 3 or more app server using rails framework. i think designing my site using rails and put it in EC2 servers. what do you think about this system? Will be work or not?

We've encountered a problem with getting a newly installed Samba based machine to join the domain. Here's the command line and error response: [root@chain samba]# smbpasswd -j COLUMBIA -r cmc-bkup -U murphyn Password: error creating domain user: NT_STATUS_INVALID_DOMAIN_ROLE Unable to join domain COLUMBIA. [root@chain samba]# Installation is a RedHat 7.2 (from KRUD) box

Hello, Many of our NT domain groups have names that contain embedded spaces, like "Domain Admins". When I attempt to use winbind and assign rights via those groups the granting fails. Group names without embedded spaces, like "Domain_Admins" work fine. In smb.conf I've tested specifying the name as: "DOMAIN+Domain Admin" DOMAIN+Domain\ Admin and

On Sat, 21 Feb 2015, Corinna Vinschen wrote: > Building on 64 bit Cygwin works out of the box. However, I have trouble > with the testsuite. As usual, I'm building outside the source tree: > > - Building the testsuite fails: > > Assembler messages: > Fatal error: can't create regress/unittests/bitmap/tests.o: No such file or directory > Makefile:152:

https://bugzilla.mindrot.org/show_bug.cgi?id=3133 Bug ID: 3133 Summary: Dynamically Assigned Ports for DynamicForward and LocalForward Product: Portable OpenSSH Version: 8.2p1 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 Component: ssh

Greetings! I''d appreciate hearing from anybody who''s had experience with any of this. I''ve got a Rails app that currently deployed on EC2 with MySQL and am readying to move from a dev / prototype model to a full-scale production model. Right now I''ve got a single MySQL instance. I''m getting ready to move that to a master-slave setup. I''m

On 28.09.2014 22:22, flavio wrote: > I follow your tutorial untill this instruction: > > wget "http://downloads.sourceforge.net/project/libusb/libusb-1.0/libusb- > 1.0.18/libusb-1.0.18.tar.bz2? > r=http%3A%2F%2Fwww.libusb.org%2F&ts=1404210716&use_mirror=softlayer-ams" > -O libusb-1.0.18.tar.bz2 > > in my opiniono there are 2 " that are not needed and