httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Boyle Owen" <Owen.Bo...@swx.com>
Subject RE: [users@httpd] How to close connection instead of sending 403?
Date Mon, 20 Jun 2005 11:20:34 GMT
> -----Original Message-----
> From: dtufs [mailto:dtufs@yahoo.com]
> Sent: Montag, 20. Juni 2005 11:48
> To: users@httpd.apache.org
> Subject: RE: [users@httpd] How to close connection instead of sending
> 403?
> 
> 
> 
> 
> --- Boyle Owen <Owen.Boyle@swx.com> wrote:
> 
> > Apache is an application
> > and can only block at the HTTP layer - it can't
> > interfere with TCP/IP. 
> 
> That is certainly true, but Apache must be capable of
> closing a connection -- that seems to be an elementary
> operation for a web server (and possibly also capable
> of deciding not to send back any reply).

It depends on what you mean by "connection". TCP/IP is more like the postal service than the
telephone system so there aren't really any connections at all (you don't "connect" to your
postman). The process of communication between the client and server is normally called a
"session" and that can be kept alive to allow repeated requests. However, apache is governed
by the HTTP RFC (2068) which states (section 6) that;

"After receiving and interpreting a request message, a server responds with an HTTP response
message."

So apache is not allowed to act like a firewall and silently drop a request. The RFC specifically
requires the server to respond to valid requests with a response message (which may be 403
Forbidden). Unfortunately, there's nothing in the RFC that allows for "closing a connection".

Rgds,
Owen Boyle
Disclaimer: Any disclaimer attached to this message may be ignored.  






> 
> __________________________________________________
> Do You Yahoo!?
> Tired of spam?  Yahoo! Mail has the best spam protection around 
> http://mail.yahoo.com 
> 
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP 
> Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
> 
>
 
 
This message is for the named person's use only. It may contain confidential, proprietary
or legally privileged information. No confidentiality or privilege is waived or lost by any
mistransmission. If you receive this message in error, please notify the sender urgently and
then immediately delete the message and any copies of it from your system. Please also immediately
destroy any hardcopies of the message. You must not, directly or indirectly, use, disclose,
distribute, print, or copy any part of this message if you are not the intended recipient.
The sender's company reserves the right to monitor all e-mail communications through their
networks. Any views expressed in this message are those of the individual sender, except where
the message states otherwise and the sender is authorised to state them to be the views of
the sender's company.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message