Membership Membership:
Latest New User Latest: vpros
Past 24 Hours Past 24 Hours: 0
Prev. 24 Hours Prev. 24 Hours: 0
User Count Overall: 137

People Online People Online:
Visitors Visitors: 45
Members Members: 0
Total Total: 45

NakedMCSE Computer Tech Support Forums

So you have passed all of the exams and you are now out in the real world of windows servers, linux servers and freebsd servers faced with a tech support problem you have never seen before...

Find free online tech support in the forums below, respecting that advice is free, but work beyond advice is not...

The General forum is provided for off topic discussion.

You need a user account to post - please Register or Login.

Online Tech Support Forums
 
  Forum  Microsoft Tech ...  Windows XP  Client opening multiple connections using same IP.
Previous Previous
 
Next Next
New Post 2/4/2010 8:48 AM
Unresolved
  david6758
2 posts
No Ranking


Client opening multiple connections using same IP. 
Modified By david6758  on 2/4/2010 9:50:13 AM)

Saw the following in my log file earlier today. Using Apache ver. 2.2.14. KeepAlive, and all affiliated commands, are at their default values.

24.131.122.205 - - [01/Feb/2010:13:06:12 -0500] "GET /books/The_Secret_Doctrine__AnthropogenesisV2.pdf HTTP/1.0" 206 19508816 "http://www.bing.com/search?q=secret+doctrine+pdf&first=11&FORM=PORE" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.2)"
.
.
.
24.131.122.205 - - [01/Feb/2010:13:15:12 -0500] "GET /books/The_Secret_Doctrine__AnthropogenesisV2.pdf HTTP/1.0" 206 19624690 "http://www.bing.com/search?q=secret+doctrine+pdf&first=11&FORM=PORE" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.2)"

I'm showing the 1st and the last, the 182nd!!!, lines. All are 206 requests. No 200 to start things. The size of the upload will vary. The actual size of the file is 30.6MB. All 182 totaled 2.8 GB!!!

I would of expected MaxKeepAliveRequests to of stopped this at 100. Does the HTTP/1.0 have anything to do with this?

Regardless, how do I prevent such foolishness?

Thank You!

 
New Post 2/4/2010 9:46 AM
  Walker
119 posts
www.lairdscomputer.com
10th Level Poster


Re: Client opening multiple connections using same IP. 

Hi David,

You are on the right track - HTTP/1.0 does not support KeepAlives - it opens multiple connections. 

This is a very typical problem for Apache servers - people hitting them with downloaders that open multiple connections.

Usually I install mod_limitipconn to control this when it gets out of hand.  Not sure if there is a version of that for the windows based servers.

Another option for controlling this is at the firewall level, with the same basic idea of restricting inbound connections to 4 per IP.

So - there is no simple short configuration fix for this - you will need to install a module to limit the number of connections from a single IP.

Thanks,
Walker

 
New Post 2/4/2010 11:10 AM
  david6758
2 posts
No Ranking


Re: Client opening multiple connections using same IP. 

Thanks for the reply Walker:

I've installed mod_limitipconn but this only works for simultaneous connections. I had 182 uploads over a 9 minute period which were not necessarily simultaneous. This module won't help in this situation.

Took a look at my firewall, ZoneAlarm. Doesn't give me the option to restrict IP's in this way.

I have set up Apache to deny HTTP/1.0 connections but this has its drawbacks. Prevents legitimate people from getting in unless they use HTTP/1.1.

Thanks again,

David

 
Previous Previous
 
Next Next
  Forum  Microsoft Tech ...  Windows XP  Client opening multiple connections using same IP.
Send me One Million FREE Guaranteed Visitors