From owner-freebsd-net Tue Aug 7 22:41:34 2001 Delivered-To: freebsd-net@freebsd.org Received: from diamond.ellwood.org (topaz.ellwood.org [64.4.141.88]) by hub.freebsd.org (Postfix) with ESMTP id 6667737B405 for ; Tue, 7 Aug 2001 22:41:32 -0700 (PDT) (envelope-from chris@ellwood.org) Received: by diamond.ellwood.org (MailServer, from userid 1000) id 2A9921F83; Tue, 7 Aug 2001 22:41:31 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by diamond.ellwood.org (MailServer) with ESMTP id 1BD695D7E; Tue, 7 Aug 2001 22:41:31 -0700 (PDT) Date: Tue, 7 Aug 2001 22:41:31 -0700 (PDT) From: Christopher Ellwood X-X-Sender: To: Alfred Perlstein Cc: Subject: Re: Problem with Code Red II and HTTP Accept Filtering In-Reply-To: <20010807235744.A85642@elvis.mu.org> Message-ID: <20010807223158.F672-100000@diamond> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Tue, 7 Aug 2001, Alfred Perlstein wrote: > This is somewhat true, however your machine seems to be configured > quite poorly. > > Having a low amount of NMBCLUSTERS (1024) and at the same time keeping > an unbounded (or at least large) listen queue (listen(fd,-1)) is > not advised, especially when you are using accept filters. Yes, I agree that this machine was configured poorly to be a production web server. However, this machine was just used for testing and if it wasn't for Code Red scans would have practically no http traffic. I realize that most people would not be running accept filters on a low traffic test machine, but regardless, I though a mention of the problem would be warranted in case anyone else ran into this problem and was unsure of the cause. Regards, - Christopher Ellwood To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message