[Xitami] Xitami DoS/DDoS (CFM, PHP, Perl, and *ALL* CGIs)...

[Francis Turner]

Thomas J. Hruska wrote:

>At 04:06 PM 4/29/2002 +0200, Francis Turner writeth:
>  
>
>>Very interesting.
>>
>>I wonder if this explains my persisitant GSL/XML problem(s). Sounds 
>>higly plausible.
>>    
>>
>
>Could you elaborate on those problems?  I have seen various, related
>incidents in the past month or so since this issue arose.  The most recent
>one is under Linux with CGIs causing the server to be very unresponsive
>under heavy loads.  There was an earlier one with Win98 crashing on a low
>memory system and many CGIs opening at once.  You get the idea...
>  
>
See email last month 
http://lists.xitami.org/pipermail/xitami/2002-March/002786.html

>  
>
>>I suppose I'd better look at the source to fiure out how the XML/GSL 
>>stuff differs from an external CGI. It is true that my XML problems have 
>>got worse when I use statements like
>>.xml from <filename>
>>thus requiring more files to be opened at a given moment.
>>    
>>
>
>Remember that filters are CGIs in "disguise."  They have somewhat different
>properties than CGIs, but are basically the same.
>
>Also, unless you have 50-60 simultaneous users on the system using CGIs,
>this problem will go unnoticed.  
>
Well I was stress testng things so it was 1 user but one working things 
fairly hard.

Francis

-- 
...if the US Government were ever to get really serious about Internet 
security, the top players in Microsoft's management hierarchy would find 
themselves handcuffed, blindfolded, led onto a tarmac within some obscure 
Air Force base, and shot.
-- Thomas C Greene (http://www.theregister.co.uk/content/55/23223.html)