[Zope] Responding to hackers
Chris Withers
chrisw@nipltd.com
Mon, 28 Oct 2002 17:34:35 +0000
Skip Montanaro wrote:
> >> You might be able to slow them down. Depending what sort of control
> >> you have over the HTTP bits stuffed on the wire, when you encounter
> >> requests for such pages, you can have the thread serving the
> >> connection slow its responses to a crawl, issue "100 Continue"
> >> responses, etc.
>
> Chris> Isn't this the same as a DOS attack on yur own server, though?
>
> To avoid this problem you could cap the number of "sluggish" responses at
> some figure, after which you simply fall back to regular 404 responses.
All sounds cool, lot of work though ;-)
cheers,
Chris