Apache DoS - is Varnish affected?

Svein Skogen (listmail account) svein-listmail at stillbilde.net
Fri Jun 19 18:42:14 CEST 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Poul-Henning Kamp wrote:
> 
> Systems using "http accept filters" (FreeBSD possibly others) the Varnish
> (or apache) will never even see these connections in the first place.
> 

Does this basically mean that in these uncertain times where kiddiots
DoS (Destroying our Sanity) just for the fun of it, using accf_http
should go into the checklist for every webserver, or am I reading this
wrong?

//Svein

- --
- --------+-------------------+-------------------------------
  /"\   |Svein Skogen       | svein at d80.iso100.no
  \ /   |Solberg Østli 9    | PGP Key:  0xE5E76831
   X    |2020 Skedsmokorset | svein at jernhuset.no
  / \   |Norway             | PGP Key:  0xCE96CE13
        |                   | svein at stillbilde.net
 ascii  |                   | PGP Key:  0x58CD33B6
 ribbon |System Admin       | svein-listmail at stillbilde.net
Campaign|stillbilde.net     | PGP Key:  0x22D494A4
        +-------------------+-------------------------------
        |msn messenger:     | Mobile Phone: +47 907 03 575
        |svein at jernhuset.no | RIPE handle:    SS16503-RIPE
- --------+-------------------+-------------------------------
                     Picture Gallery:
          https://gallery.stillbilde.net/v/svein/
- ------------------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAko7v+YACgkQODUnwSLUlKTYbACeKqc2n1UfTGLhkuq1QdP5g+IC
PUIAoJrA4eC13T1JGCt2Y7GYIxdYT/Eo
=2dIU
-----END PGP SIGNATURE-----



More information about the varnish-misc mailing list