httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "\"Crash\" Dummy" <gm...@thedatalist.com>
Subject [users@httpd] Setting request URI length limit
Date Wed, 08 Aug 2007 14:05:28 GMT
I have Apache 2.2.4 installed on Windows 2000 pro. When I receive a request
longer than 8192 (I think), the server responds with a 414 (Request URI too
long) error. That's fine, but I would like to know if it is adjustable (likely
downward), and if it can be set for a specific method (GET, POST, SEARCH).

This caught my interest because of a repeated exploit attempt I get which is
actually aimed at an IIS server. The exploit, which is probably trying to
overrun a buffer, sends a SEARCH request with about 32 KB of binary garbage.
Apache is handling the situation with no problem, but I'm a control freak. :-)
-- 
Crash

Reply to group only. E-mail is blocked.




---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message