Re: Squirrelmaill Issue

On Tue, 2 May 2017, [email protected] wrote:

>
> SquirrelMail Issue:  One of our users was at the Login Page and tossed
> something down on their desk that kept the Enter key on their keyboard
> depressed. This caused the number of httpd processes on the server to
> increase at a rapid rate until the max number of 8000 httpd sessions, as
> set in httpd.conf, was reached causing the webpage to no longer be
> available to any other users until restarting the httpd service. I am able
> to reproduce the issue by holding down on the Enter key.
>
> SquirrelMail Version:	1.4.19
> Installed Plugins:
>    1. administrator
>    2. compatibility
>    3. username
>    4. compose_extras
>    5. squirrelspell
>    6. show_headers
>    7. addgraphics
>    8. msg_flags
>    9. quicksave
>    10. timeout_user
>    11. unsafe_image_rules
> PHP Version:	5.2.17
> Web Server:	Apache 2.2.17
> IMAP server:	Courier-IMAP 4.3.1
> SMTP server:	Qmail 1.0.3
> OS Version:	Red Hat Enterprise Linux 5.11
> Installed By:	Following qmailrocks.org instructions in 2009
> Browser:	Internet Explorer 11
>
>
> Derek Wnek
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> -----

This sounds like a http ddos issue rather than a squirrelmail issue. 
Since squirrelmail is a php application that depends on an http server to 
serve data the place to limit connections is in the http layer itself.

Maybe you should look into something like mod_limitipconn to limit 
requests per ip directly inside apache.

A quick google search on mod_limitipconn turns up plenty of how-tos.


Ted Hatfield

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: [email protected]
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users