From owner-freebsd-apache@FreeBSD.ORG Thu May 20 11:28:06 2010 Return-Path: Delivered-To: apache@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id D79C8106566B; Thu, 20 May 2010 11:28:06 +0000 (UTC) (envelope-from jonas@fsdb.org) Received: from marmaduke.frukt.org (marmaduke.frukt.org [195.67.112.219]) by mx1.freebsd.org (Postfix) with ESMTP id 682648FC17; Thu, 20 May 2010 11:28:06 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=fsdb.org; s=mail; h=Content-Type:Subject:To:Organization:Reply-To:From:Date:Message-ID:Received:Received:Received:X-Virus-Scanned-By:Authentication-Results:X-SMTP-From:X-Scanned-By:Received; bh=TIqn5GhXsWKat4qXWMDIZg+YoJqZ4JEk8IbVqb0HJrE=; b=UejVj2daK9TsrQJYcO1AHDnOj5saEQJjnlC+1ay91d29O885xyUc7Ho1ehzCf2sMEsmdx+hFX2Eyu0bLN1tMtGUwCUZ7cXHzHX33QsjtFDWV0b60GuaFaHQtsPV0nk7I/crmlFlE/Qnn0t3setvRwCOuuFGnMwbZ6T9GCT4Z3vc=; Received: from chip.i.frukt.org ([10.0.7.10] helo=chip.frukt.org) by marmaduke.frukt.org with esmtp (Exim 4.71 (FreeBSD)) (envelope-from ) id 1OF3f0-000Jdm-N9; Thu, 20 May 2010 13:11:30 +0200 X-Hash: SCt|74e2efd14c52ad468a91665bcf00e77bcae77755|227fcd93d88942a06bd498659daf5cc3 X-Scanned-By: chip.frukt.org, using MIMEDefang 2.64 with local filter 31.214.tl39 X-SMTP-From: passed localhost [127.0.0.1] (chip.i.frukt.org) X-Fortune: If you are too busy to read, then you are too busy. X-Exclamation: Hubba, hubba, hopp! Authentication-Results: chip.frukt.org; auth=pass smtp.auth=sT5OiH2TzldDda5/zJesmA X-Virus-Scanned-By: chip.frukt.org, using CLAMD Received: from chip.i.frukt.org (localhost [127.0.0.1]) by chip.frukt.org (envelope-from ) (sm etc) with ESMTP id o4KBBUCU017335; Thu, 20 May 2010 13:11:30 +0200 (CEST) Received: from chip.frukt.org (localhost [127.0.0.1]) by chip.i.frukt.org (envelope-from ) (sm queue) with ESMTP id o4KBBTDL017332; Thu, 20 May 2010 13:11:29 +0200 (CEST) Received: from [127.0.0.1] (plupp.i.frukt.org [10.0.4.37]) by chip.frukt.org (envelope-from ) (asasmtpd v0.19a0) with ESMTPSA id 1of3EZ-4vv-i29oS; Thu, 20 May 2010 13:11:29 +0200 (auth sT5OiH2TzldDda5/zJesmA) Message-ID: <4BF518E1.7020300@fsdb.org> Date: Thu, 20 May 2010 13:11:29 +0200 From: Jonas Eckerman Organization: FSDB User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.9) Gecko/20100317 Thunderbird/3.0.4 ThunderBrowse/3.2.8.1 MIME-Version: 1.0 To: apache@FreeBSD.org X-Y: Z X-Face: &, Jc#k+2@X0G^`k`A2+It?[GrGD^7kwSel7FHi4829{Qy*EsE6cJjJ`~#CI>0>qbUwKUB:+ X-Image-URL: http://mmm.truls.org/jonas_x-image-url.gif Content-Type: multipart/mixed; boundary="------------050309070700030507040609" X-Antivirus: avast! (VPS 100519-0, 2010-05-19), Outbound message X-Antivirus-Status: Clean Cc: ports@FreeBSD.org Subject: FreeBSD Port: apache-2.2.15_7 missing mod_reqtimeout X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: jonas@fsdb.org List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 May 2010 11:28:07 -0000 This is a multi-part message in MIME format. --------------050309070700030507040609 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit Hello! Just wanted to give you a notice that the apache 2.2.15 is missing options for enabling the new mod_reqtimeout module. That module can be used to lessen the impact of a slow loris attack, wich makes it kind of nice to have. The attached small patch makes it available, and selected by default. Regards /Jonas -- Jonas Eckerman Förbundet Sveriges Dövblinda http://www.fsdb.org/ http://whatever.frukt.org/ --------------050309070700030507040609 Content-Type: text/plain; name="Makefiles.diff" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="Makefiles.diff" diff -u ./Makefile.modules ../new/Makefile.modules --- ./Makefile.modules 2010-05-20 13:06:34.000000000 +0200 +++ ../new/Makefile.modules 2010-05-20 13:06:56.000000000 +0200 @@ -30,7 +30,8 @@ cgi charset_lite dbd deflate dir dumpio env expires \ headers imagemap include info log_config logio mime \ mime_magic negotiation rewrite setenvif speling status \ - unique_id userdir usertrack vhost_alias filter version + unique_id userdir usertrack vhost_alias filter version \ + reqtimeout PROXY_MODULES= proxy proxy_connect proxy_ftp proxy_http proxy_ajp proxy_balancer proxy_scgi SSL_MODULES= ssl SUEXEC_MODULES= suexec diff -u ./Makefile.options ../new/Makefile.options --- ./Makefile.options 2010-05-20 13:06:34.000000000 +0200 +++ ../new/Makefile.options 2010-05-20 13:06:56.000000000 +0200 @@ -73,5 +73,6 @@ SSL "Enable mod_ssl" ON \ SUEXEC "Enable mod_suexec" OFF \ SUEXEC_RSRCLIMIT "SuEXEC rlimits based on login class" OFF \ + REQTIMEOUT "Enable mod_reqtimeout" ON \ CGID "Enable mod_cgid" OFF \ --------------050309070700030507040609--