Comment 2 for bug 839569

Revision history for this message
Pawel Tecza (ptecza) wrote :

Hello Steve,

At first, thanks a lot for your response!

When Apache's gzip compression is on here and I enable killapache() function of Perl exploit script, then my web server consumes 100% memory and CPU and it's unusable. So it seems that Apache upgrade hasn't helped me a lot.

I have a little more complex Apache setup (PHP, mod_rewrite, mod_substitute, LDAP auth, etc). This is a back-end server behind revers proxy (Pound), but when I test it, then I go there directly. Of course I was testing upgraded Apache for disabled the mitigation options.

I don't have an idea why Content-Length and Content-Range fields aren't returned, but I'll take a look at my config again and I'll let you know if I find something related.