戰校鄙視鏈
頂醫：台大、陽明
後段：成功、北醫、長庚 墊底：其他 地下室：中山、慈濟 茅坑：義守 台大電資 化糞池：其他頂大電資 中字電資 下水道：頂大中字其他理工科系 汙水處理站：國立文組 其他學校理工科 外海：其它文組 私立科大 以上只有 文組、科立科大是清流10.29 Slow HTTP Denial of Service Attack (Slowloris)
站長日誌 109.10.29 弱點掃描偵測到Slow HTTP Denial of Service Attack弱點一隻 Server-Specific Recommendations Applying the above steps to the HTTP servers tested in the previous article indicates the following server-specific settings: Apache Using the < Limit > and < LimitExcept > directives to drop requests with methods not supported by the URL alone won’t help, because Apache waits for the entire request to complete before applying these directives. Therefore, use these parameters in conjunction with the LimitRequestFields , LimitRequestFieldSize , LimitRequestBody , LimitRequestLine , LimitXMLRequestBody directives as appropriate. For example, it is unlikely that your web app requires an 8190 byte header, or an unlimited body size, or 100 headers per request, as most default configurations have. Set reasonable TimeOut and KeepAliveTimeOut directive values. The default value of 300 seconds for TimeOut is overkill for most situations. ListenBackLog ’s default value of 511 cou
留言
張貼留言