Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (hermes.apache.org: domain of floeff@arcor.de designates
 151.189.20.156 as permitted sender)
Message-ID: <415A8F8A.1050507@arcor.de>
Date: Wed, 29 Sep 2004 12:33:46 +0200
From: Florian Effenberger <floeff@arcor.de>
MIME-Version: 1.0
To: users@httpd.apache.org
References: <415A66AC.4080102@arcor.de>
 <20040929100019.00006eb9@fe-pc-092.int.cinetic.de>
 <415A71D5.9000809@arcor.de>
 <Pine.LNX.4.53.0409290932240.2804@hugin.webthing.com>
In-Reply-To: <Pine.LNX.4.53.0409290932240.2804@hugin.webthing.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: [users@httpd] PHP as CGI: Denial of Service?

Hi,

> Nevertheless a very good option.  Lets you use the (far more scalable)
> Worker MPM, for instance).

If my users need PHP, it's not an option at all. ;-)

> Loading PHP is the issue.  HelloWorld isn't.

Is PHP this big and fat that it can so easily bog down a server?

> Neither would I.  I recently had some attacks on my server, and after
> blocking the first few IPs they came from, I hacked up a mini-module
> to return /robots.txt to the attackers.  But that was something very
> specific: for a more general solution you'd want
> http://force-elite.com/~chip/archives/mod_load_average-0.1.0-test3.tar.bz2

I'll have a look at it, thanks, but I always think that this works 
around the problem instead of solving it. :-(

Florian


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org