Summary: | TTLimit directive to set maximum allowed IP_TTL | ||
---|---|---|---|
Product: | Apache httpd-2 | Reporter: | Donatas Abraitis <donatas.abraitis> |
Component: | Core | Assignee: | Apache HTTPD Bugs Mailing List <bugs> |
Status: | NEW --- | ||
Severity: | normal | CC: | donatas.abraitis |
Priority: | P2 | Keywords: | PatchAvailable |
Version: | 2.5-HEAD | ||
Target Milestone: | --- | ||
Hardware: | All | ||
OS: | All | ||
URL: | http://blog.donatas.net/blog/2017/04/20/http-request-validation/ | ||
Attachments: |
TTLimit directive
TTLimit.patch TTLimit.patch TTLimit.patch |
Description
Donatas Abraitis
2017-06-12 19:07:34 UTC
Created attachment 35048 [details]
TTLimit directive
Any updates on this? Attached patch would be completed by a patch to document the new directive. Somewhere in docs/manual/mod/mpm_common.xml Created attachment 37264 [details]
TTLimit.patch
Thanks, Nick. Added a patch. Created attachment 37265 [details]
TTLimit.patch
Created attachment 37267 [details]
TTLimit.patch
The latest patch works as expected: root@donatas-laptop:/home/donatas/httpd-2.4.43# grep TTLimit /usr/local/apache2/conf/httpd.conf TTLimit 5 root@donatas-laptop:/home/donatas/httpd-2.4.43# strace -esetsockopt /usr/local/apache2/bin/httpd -f /usr/local/apache2/conf/httpd.conf setsockopt(3, SOL_SOCKET, SO_REUSEPORT, [1], 4) = 0 setsockopt(4, SOL_SOCKET, SO_REUSEADDR, [1], 4) = 0 setsockopt(4, SOL_SOCKET, SO_KEEPALIVE, [1], 4) = 0 setsockopt(4, SOL_IPV6, IPV6_V6ONLY, [0], 4) = 0 setsockopt(4, SOL_SOCKET, SO_SNDBUF, [1024], 4) = 0 setsockopt(4, SOL_TCP, TCP_NODELAY, [1], 4) = 0 setsockopt(4, SOL_IP, IP_TTL, [5], 4) = 0 setsockopt(4, SOL_TCP, TCP_DEFER_ACCEPT, [30], 4) = 0 +++ exited with 1 +++ root@donatas-laptop:/home/donatas/httpd-2.4.43# Nick, all good with this? Sorry, just revisited this. Thanks for bugging me! The "Usage" in your docs patch looks more like an application - your application - than an explanation of the feature itself. Do you mind if I reword it a little: say it sets the socket option, and make your text an example of why someone might use it? I think that's what's meant anyway, but if I hadn't read your posts (and blog) I might find it confusing! Hi, Nick, that works for me if you adopt it how it's needed ;-) |