[Xitami] Xitami DoS/DDoS (CFM, PHP, Perl, and *ALL* CGIs)...

Francis Turner xitami@lists.xitami.org
Mon, 29 Apr 2002 16:06:21 +0200


Thomas J. Hruska wrote:

>I previously e-mailed this list about a problem with 50 simultaneous
>connections to CGI scripts under Xitami.  I have since performed additional
>testing and have come to the conclusion that CGIs are a fatal source of
>DoS/DDoS attacks with the Xitami webserver under Windows (others have
>complained about Xitami slowing to a crawl under Linux).  
>
><snip>
>
> It really does not
>matter...the problem is that both Xitami and XiFusion have a major DoS/DDoS
>issue that is going to take a while to fix.
>
>  
>
Very interesting.

I wonder if this explains my persisitant GSL/XML problem(s). Sounds 
higly plausible.

I suppose I'd better look at the source to fiure out how the XML/GSL 
stuff differs from an external CGI. It is true that my XML problems have 
got worse when I use statements like
.xml from <filename>
thus requiring more files to be opened at a given moment.

Francis

-- 
...if the US Government were ever to get really serious about Internet 
security, the top players in Microsoft's management hierarchy would find 
themselves handcuffed, blindfolded, led onto a tarmac within some obscure 
Air Force base, and shot.
-- Thomas C Greene (http://www.theregister.co.uk/content/55/23223.html)