From owner-freebsd-security@FreeBSD.ORG  Wed Sep 30 16:46:59 2009
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id BD57C106568B
	for <freebsd-security@freebsd.org>;
	Wed, 30 Sep 2009 16:46:59 +0000 (UTC)
	(envelope-from freebsd@optiksecurite.com)
Received: from relais.videotron.ca (relais.videotron.ca [24.201.245.36])
	by mx1.freebsd.org (Postfix) with ESMTP id 96ED68FC15
	for <freebsd-security@freebsd.org>;
	Wed, 30 Sep 2009 16:46:59 +0000 (UTC)
MIME-version: 1.0
Content-transfer-encoding: 7BIT
Content-type: text/plain; charset=ISO-8859-1; format=flowed
Received: from [69.69.69.193] ([24.201.201.211]) by VL-MO-MR005.ip.videotron.ca
	(Sun Java(tm) System Messaging Server 6.3-4.01 (built Aug  3 2007;
	32bit))
	with ESMTP id <0KQS00L7NJUAQF70@VL-MO-MR005.ip.videotron.ca> for
	freebsd-security@freebsd.org; Wed, 30 Sep 2009 11:46:58 -0400 (EDT)
Message-id: <4AC37D6B.3060409@optiksecurite.com>
Date: Wed, 30 Sep 2009 11:46:51 -0400
From: Martin Turgeon <freebsd@optiksecurite.com>
User-Agent: Thunderbird 2.0.0.23 (Windows/20090812)
To: freebsd-security@freebsd.org
Subject: Update on protection against slowloris
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Sep 2009 16:46:59 -0000

Hi list!

We tested mod_antiloris 0.4 and found it quite efficient, but before 
putting it in production, we would like to hear some feedback from 
freebsd users. We are using Apache 2.2.x on Freebsd 6.2 and 7.2. Is 
anyone using it? Do you have any other way to patch against Slowloris 
other than putting a proxy in front or using the HTTP accept filter?

Thanks for your feedback,

Martin