httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Joshua Slive" <jos...@slive.ca>
Subject Re: [users@httpd] Setting request URI length limit
Date Wed, 08 Aug 2007 16:54:47 GMT
On 8/8/07, Crash Dummy <gmane@thedatalist.com> wrote:
> I have Apache 2.2.4 installed on Windows 2000 pro. When I receive a request
> longer than 8192 (I think), the server responds with a 414 (Request URI too
> long) error. That's fine, but I would like to know if it is adjustable (likely
> downward), and if it can be set for a specific method (GET, POST, SEARCH).
>
> This caught my interest because of a repeated exploit attempt I get which is
> actually aimed at an IIS server. The exploit, which is probably trying to
> overrun a buffer, sends a SEARCH request with about 32 KB of binary garbage.
> Apache is handling the situation with no problem, but I'm a control freak. :-)

See:
http://httpd.apache.org/docs/2.2/mod/core.html#limitrequestline

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message