Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Comment Re:Probably good to give another 48 hours anyway (Score 2) 208

In the mean time, for those who care enough to already be running mod_security. All hits to our multiple web servers go through a mod_security reverse-proxy first:

## Bash attack

SecRule REQUEST_HEADERS "^\(\) {" \
"phase:1,deny,id:1000,t:urlDecode,status:403,log,msg:'CVE-2014-6271 - Bash Attack'"

SecRule REQUEST_LINE "\(\) {" \
"phase:1,deny,id:1001,status:403,log,msg:'CVE-2014-6271 - Bash Attack'"

SecRule ARGS_NAMES "^\(\) {" \
"phase:2,deny,id:1002,t:urlDecode,t:urlDecodeUni,status:403,log,msg:'CVE-2014-6271 - Bash Attack'"

SecRule ARGS "^\(\) {" \
"phase:2,deny,id:1003,t:urlDecode,t:urlDecodeUni,status:403,log,msg:'CVE-2014-6271 - Bash Attack'"

SecRule FILES_NAMES "^\(\) {" \
"phase:2,deny,id:1004,t:urlDecode,t:urlDecodeUni,status:403,log,msg:'CVE-2014-6271 - Bash Attack'"

## End bash attack

Comment Re:You forgot SQLite (Score 1) 147

It reminds me of msql (miniSQL) that was single threaded so a long request would make the others wait. In another topic, MS-SQL server login was single threaded back in 2000 although the server could handle parallel requests I think. I assume it must have been fixed by now. You could deny all other users from login just by telnetting to the MS SQL port and sit there, put into a loop when the connection timed out and almost nobody could login to the server.;-)

https://en.wikipedia.org/wiki/...

Comment Re:Learning Lab (Score 1) 287

"How are you UPS'ing for 6 hours?"

Sorry I missed the "How" part at first:
Deep cycle motor boat wet batteries coupled to an inverter. Not recommended anywhere for home use but sure cheaper than dry batteries which cost at least twice as much for the same efficiency. I now have two 12 volts batteries and I used to have 4. They are around 100$ a piece and I change them every 6-7 years or so since the power rarely go down around here so they last a long time. Most of the time, they cycle when I simulate a power outage to test the batteries. 1 hour power out test every 2 month and one test until the batteries are drained like once every six months or so.

Use at your own risk, I don't recommend or endorse anything here ;-)

Comment Re:Learning Lab (Score 1) 287

"How are you UPS'ing for 6 hours?"

Yes, I used to use it as an Internet server with live websites and such on it but I have since moved those to a real data center because bandwidth was cheaper. I used to be able to stay up 48 hours on batteries if I shut down the desktop but I have reduced the number of batteries to half what it used to be after moving to a real data center for live sites that need to be up all the time. I also have a small generator that I can use to recharge the batteries but I usually do not bother now. I have to plug and start the generator manually. The desktop is in another room with electrical wiring running to that room. The desktop uses more power than the server because of the 4 screens and video cards. Nice video cards suck a lot of power. One of the desktop screen is a 50 inches TV not plugged into the UPS circuit. I use a USB extension cord for the wireless dongle that allows me to control the playing on the TV with a wireless keyboard and mouse.

Same kind of setup in the real data center, one big server running a bunch of qemu VMs with virtual networks separated by firewall rules.

You must still have enough room to hang clothes and what not in your 42u rack then...

Slashdot Top Deals

A morsel of genuine history is a thing so rare as to be always valuable. -- Thomas Jefferson

Working...