From owner-freebsd-net  Tue Aug  7 23: 0:45 2001
Delivered-To: freebsd-net@freebsd.org
Received: from InterJet.elischer.org (c421509-a.pinol1.sfba.home.com [24.7.86.9])
	by hub.freebsd.org (Postfix) with ESMTP id 7AFE937B405
	for <freebsd-net@freebsd.org>; Tue,  7 Aug 2001 23:00:41 -0700 (PDT)
	(envelope-from julian@elischer.org)
Received: from elischer.org (InterJet.elischer.org [192.168.1.1])
	by InterJet.elischer.org (8.9.1a/8.9.1) with ESMTP id BAA73637;
	Wed, 8 Aug 2001 01:02:58 -0700 (PDT)
Message-ID: <3B70D073.F0063D9@elischer.org>
Date: Tue, 07 Aug 2001 22:38:59 -0700
From: Julian Elischer <julian@elischer.org>
X-Mailer: Mozilla 4.7 [en] (X11; U; FreeBSD 5.0-CURRENT i386)
X-Accept-Language: en, hu
MIME-Version: 1.0
To: Christopher Ellwood <chris+freebsd-net@silicon.net>
Cc: Alfred Perlstein <bright@mu.org>, freebsd-net@freebsd.org
Subject: Re: Problem with Code Red II and HTTP Accept Filtering
References: <20010807223158.F672-100000@diamond>
Content-Type: text/plain; charset=iso-8859-2
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-net@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-net.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-net>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-net>
X-Loop: FreeBSD.org

Christopher Ellwood wrote:
> 
> On Tue, 7 Aug 2001, Alfred Perlstein wrote:
> 
> > This is somewhat true, however your machine seems to be configured
> > quite poorly.
> >
> > Having a low amount of NMBCLUSTERS (1024) and at the same time keeping
> > an unbounded (or at least large) listen queue (listen(fd,-1)) is
> > not advised, especially when you are using accept filters.
> 
> Yes, I agree that this machine was configured poorly to be a production
> web server.  However, this machine was just used for testing and if it
> wasn't for Code Red scans would have practically no http traffic.  I
> realize that most people would not be running accept filters on a low
> traffic test machine, but regardless, I though a mention of the problem
> would be warranted in case anyone else ran into this problem and was
> unsure of the cause.

despite the comments, we are apreciative of the 'heads up'... it's
useful info to keep in the back of our minds..

> 
> Regards,
> 
> - Christopher Ellwood
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-net" in the body of the message

-- 
+------------------------------------+       ______ _  __
|   __--_|\  Julian Elischer         |       \     U \/ / hard at work in 
|  /       \ julian@elischer.org     +------>x   USA    \ a very strange
| (   OZ    )                                \___   ___ | country !
+- X_.---._/    presently in San Francisco       \_/   \\
          v

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message