[Zope] Zope hangs

Jamie Heilman jamie@audible.transient.net
Mon, 10 Mar 2003 03:53:54 -0800

> This weekend my Zope server stopped serving pages.
> The last entry in my Z2.log file was:
> - Anonymous [08/Mar/2003:02:08:40 +0200] "CONNECT HTTP/1.1" 404 264 "" ""

I doubt zope stopped serving pages because of this.  Can you reproduce
the hang?
> Has anyone seen this kind of "attack" before. Is there a way to prevent it?

Yes, its quite common these days, open proxies provide wonderful
gateways for spammers.  You can't stop the requests from coming, but a
correctly configured server is immune.
> Our zope:
> Zope Version (Zope 2.5.1 (source release, python 2.1, linux2), python 2.1.3, sunos5)

Are you running ZServer open to the world with no protective proxy?
If so, don't do that.  2.6.1 is unaffected by this request[1], you
should consider the upgrade.

Jamie Heilman                   http://audible.transient.net/~jamie/
"We must be born with an intuition of mortality.  Before we know the words
 for it, before we know there are words, out we come bloodied and squalling
 with the knowledge that for all the compasses in the world, there's only
 one direction, and time is its only measure."		-Rosencrantz

[1] although it does generate a 404 directly from medusa-land