Hello,
On Wed, 2 May 2001, Joseph Mack wrote:
> Julian Anastasov wrote:
> >
> > There are other dangerous settings, for example,
> > Timeout 300.
>
> What's the danger here?
Attacker: Connect, don't send GET request, wait 25min.
Repeat in parallel.
> I have a web site that generates maps. If the client
> asks for a high resolution map, it takes about 25mins to
> generate. I need a timeout at least this long (incase
> anyone else is running a job on the server at the same time)
And the clients waits for 25min? Is a cache for generated
maps appropriate? Mail delivery of the results?
> Joe
>
> --
> Joseph Mack PhD, Senior Systems Engineer, Lockheed Martin
> contractor to the National Environmental Supercomputer Center,
> mailto:mack.joseph@xxxxxxx ph# 919-541-0007, RTP, NC, USA
Regards
--
Julian Anastasov <ja@xxxxxx>
|