[Zope] Responding to hackers

Chris Withers chrisw@nipltd.com
Mon, 28 Oct 2002 17:34:35 +0000


Skip Montanaro wrote:
>     >> You might be able to slow them down.  Depending what sort of control
>     >> you have over the HTTP bits stuffed on the wire, when you encounter
>     >> requests for such pages, you can have the thread serving the
>     >> connection slow its responses to a crawl, issue "100 Continue"
>     >> responses, etc.
> 
>     Chris> Isn't this the same as a DOS attack on yur own server, though?
> 
> To avoid this problem you could cap the number of "sluggish" responses at
> some figure, after which you simply fall back to regular 404 responses.

All sounds cool, lot of work though ;-)

cheers,

Chris