From owner-freebsd-current@FreeBSD.ORG Tue Apr 22 22:36:41 2008 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 8070E1065673; Tue, 22 Apr 2008 22:36:41 +0000 (UTC) (envelope-from delphij@delphij.net) Received: from tarsier.delphij.net (delphij-pt.tunnel.tserv2.fmt.ipv6.he.net [IPv6:2001:470:1f03:2c9::2]) by mx1.freebsd.org (Postfix) with ESMTP id 324AC8FC12; Tue, 22 Apr 2008 22:36:41 +0000 (UTC) (envelope-from delphij@delphij.net) Received: from tarsier.geekcn.org (tarsier.geekcn.org [202.108.54.204]) (using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by tarsier.delphij.net (Postfix) with ESMTPS id BC1C628448; Wed, 23 Apr 2008 06:36:39 +0800 (CST) Received: from localhost (tarsier.geekcn.org [202.108.54.204]) by tarsier.geekcn.org (Postfix) with ESMTP id 710EDEB58D0; Wed, 23 Apr 2008 06:36:39 +0800 (CST) X-Virus-Scanned: amavisd-new at geekcn.org Received: from tarsier.geekcn.org ([202.108.54.204]) by localhost (mail.geekcn.org [202.108.54.204]) (amavisd-new, port 10024) with ESMTP id Wub+bt-e7NVu; Wed, 23 Apr 2008 06:36:30 +0800 (CST) Received: from charlie.delphij.net (71.5.7.139.ptr.us.xo.net [71.5.7.139]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by tarsier.geekcn.org (Postfix) with ESMTPSA id 651FBEB4B79; Wed, 23 Apr 2008 06:36:29 +0800 (CST) DomainKey-Signature: a=rsa-sha1; s=default; d=delphij.net; c=nofws; q=dns; h=message-id:date:from:reply-to:organization:user-agent: mime-version:to:cc:subject:references:in-reply-to: x-enigmail-version:openpgp:content-type:content-transfer-encoding; b=uTrWnHWuvlNCDS4ym7i4WsXHwFpVWNsdKgxgOi7S0L/GLhagZ0Bk+LZWUU1kExCNx TtRcXr3tvMdOcQoIh++5Q== Message-ID: <480E686B.7090703@delphij.net> Date: Tue, 22 Apr 2008 15:36:27 -0700 From: Xin LI Organization: The FreeBSD Project User-Agent: Thunderbird 2.0.0.12 (X11/20080421) MIME-Version: 1.0 To: Antony Mawer References: <13383.1208899946@critter.freebsd.dk> <480E6698.7000008@mawer.org> In-Reply-To: <480E6698.7000008@mawer.org> X-Enigmail-Version: 0.95.6 OpenPGP: id=18EDEBA0; url=http://www.delphij.net/delphij.asc Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: Poul-Henning Kamp , freebsd-current@freebsd.org, d@delphij.net, Ivan Voras Subject: Re: Http Accept filters (accf_http) X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: d@delphij.net List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Apr 2008 22:36:41 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Antony Mawer wrote: | Poul-Henning Kamp wrote: |> In message <480E589C.8010108@delphij.net>, Xin LI writes: |> |>> | Does anyone know why accf_accept is disabled by default in the ports' |>> | stock Apache 2.2 (it's disabled in the default config files)? I |>> thought |>> | it was because it was dangerous or flawed for some reason, though (at |>> | least for light loads comparable to those of OP) it seems to work |>> fine. |> |> I think adding them to the apache is OK, as long as apache fails |> gracefully if they are not present in the kernel. | | I seem to recall I had problems trying to get Apache to run with accept | filters turned on in a jail environment... having said that, I just | tried to enable it in a jail and restarted Apache and it started up | fine. Maybe I was just imagining it? Hmm... I think Apache would just work as long as it is loaded into kernel or statically linked into it, no matter if it is in a jail environment (my personal server uses Apache in jail for dynamic contents and it just worked fine). Cheers, - -- Xin LI http://www.delphij.net/ FreeBSD - The Power to Serve! -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.8 (FreeBSD) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkgOaGsACgkQi+vbBBjt66BcMQCguqcSBpRk36gDkmJPLUenq3ji qx0An1JpBoxh+Adk3g6Z+hn2ko95XQDS =oys7 -----END PGP SIGNATURE-----