Mailing-List: contact modules-dev-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: modules-dev@httpd.apache.org
Received-SPF: pass (nike.apache.org: domain of sorinm@gmail.com designates
 209.85.220.220 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :content-type;
        b=ifeFU7nNPXnNbE2L8K3CDy6Jz8ReyLs6fW8a+ADX/H1ONNLENvohAAdiVMFZ6c3FlS
         KrsyPQ8S+vWQPrFB+TDTN6q2ZQHIqhuCtbSXJgWi9YyBw0V43wRv1FmTzZezLz4SSkUv
         /McU/Q2K+JmTEjX7VvsNXdVPVZbFVCZgwzwgs=
MIME-Version: 1.0
In-Reply-To: <4A97E44B.4070604@bytecamp.net>
References: <4A97E44B.4070604@bytecamp.net>
Date: Fri, 28 Aug 2009 16:33:58 +0200
Message-ID: <20170a030908280733l2a6d407bg4393845241eb0c90@mail.gmail.com>
Subject: Re: correct hook function after accepting connection
From: Sorin Manolache <sorinm@gmail.com>
To: modules-dev@httpd.apache.org
Content-Type: text/plain; charset=ISO-8859-1

On Fri, Aug 28, 2009 at 16:06, Robert Schulze<rs@bytecamp.net> wrote:
> Hi,
>
> is there a hook for dealing with connections *before* any http data is read?
> The reason for this todo would be dropping connections from hosts without
> ever reading the request - keeping slowloris in mind.
>
> With kind regards,
>
> Robert Schulze
>

You have a choice among these:

pre_connection(conn_rec *, void *)
process_connection(conn_rec *)

If return != OK && != DECLINED => connection is not processed.

However, I would suggest that connections are better dropped at
IP-level (by firewall rules/iptables) or by using

Order allow,deny
Allow from all
Deny from the_ips_you_want_to_reject

Regards,
S

-- 
A: Because it reverses the logical flow of conversation.
Q: Why is top-posting frowned upon?
A: Top-posting.
Q: What is the most annoying thing in e-mail?