httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Jakob Goldbach ...@b-one.net>
Subject Stopping bogus clients in Apache 1.3
Date Fri, 06 Oct 2006 08:21:46 GMT
Hi,

Right now many p2p clients thinks my apache is part of their network,
dcplusplus.

All apache childs are occupied and I see many loglines like this in my
error.log

[Fri Oct  6 10:06:36 2006] [error] [client 85.166.201.160] request
failed: erroneous characters after protocol string: $MyNick
generalbassist|$Lock EXTENDEDPROTOCOLABCABCABCABCABCABC
Pk=DCPLUSPLUS0.689ABCABC|

Apparently the p2p client connects, startes with a "$MyNick..." line and
then wait for response.

I've decreased Timeout to 10 seconds - below is a strace output. Is
there anyway for me to hook in and drop these bogus request ??

Any help is appreciated
/Jakob



09:58:46 accept(15, {sa_family=AF_INET, sin_port=htons(4329),
sin_addr=inet_addr("<clientip>")}, [16]) = 10

09:58:46 rt_sigaction(SIGUSR1, {SIG_IGN}, {0x805f290, [], SA_INTERRUPT},
8) = 0

09:58:46 fcntl64(10, F_SETFD, FD_CLOEXEC) = 0

09:58:46 getsockname(10, {sa_family=AF_INET, sin_port=htons(80),
sin_addr=inet_addr("<myip>")}, [16]) = 0

09:58:46 setsockopt(10, SOL_TCP, TCP_NODELAY, [1], 4) = 0

09:58:46 read(10, "$MyNick ElBarto|$Lock EXTENDEDPR"..., 4096) = 82

09:58:46 read(10, 0x809dbc4, 4096)      = ? ERESTARTSYS (To berestarted)

09:58:58 --- SIGALRM (Alarm clock) @ 0 (0) ---

09:58:58 time(NULL)                     = 1160121538

Mime
View raw message