tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Henri Gomez <hgo...@users.sourceforge.net>
Subject Re: AW: AW: [5.0] Connector default configuration + connection timeou t
Date Tue, 29 Jul 2003 08:45:26 GMT
Bill Barker a écrit :

> ----- Original Message ----- 
> From: "Henri Gomez" <hgomez@apache.org>
> To: "Tomcat Developers List" <tomcat-dev@jakarta.apache.org>
> Sent: Tuesday, July 29, 2003 12:46 AM
> Subject: Re: AW: AW: [5.0] Connector default configuration + connection
> timeou t
> 
> 
> 
>>Fischer, Ilona a écrit :
>>
>>>IMHO it's the definition of a proxy to send/recive requests instead of
>>>client... that means only the proxy was talking with the webserver -> in
> 
> the
> 
>>>HTTP-header was only the IP of the Proxy
>>>
>>
>>And what about the Via: header ?
>>
> 
> 
> It's unreliable at best:  I routinely configure mod_proxy to suppress it.
> And, in any case, it only tells you the name of the Proxy (which you already
> know ;-).

Ok.

Preventing DOS attack is not an easy task, that's why I prefer using 
Tomcat behind a native web-server like Apache 2.

BTW, strategy could be invented but we may allways have one step behind
attackers.


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-dev-help@jakarta.apache.org


Mime
View raw message