[aklug] Re: Bad Packet

From: Damien Hull <damien@linuxninjas.tv>
Date: Wed Nov 03 2010 - 14:10:14 AKDT

Sent from my iPhone

On Nov 3, 2010, at 2:05 PM, Tom Simes <simestd@netexpress.com> wrote:

> On 11/03/10 13:57, adam bultman wrote:
>>
>>
>> Damien Hull wrote:
>>> Sent from my iPhone
>>>
>>> On Nov 3, 2010, at 12:37 PM, Christopher Howard<cmhoward@frigidcode.com> wrote:
>>>
>>>
>>>> On Wed, Nov 03, 2010 at 10:47:06AM -0800, Damien Hull wrote:
>>>>
>>>>> Is there a malformed or "bad packet" that can take down Apache?
>>>>> I just added very basic iptables rules to my webserver. If there is a bad
>>>>> packet I would like iptables to block it. If it's possible.
>>>>>
>>>>>
>>>>>
>>>> This stream will hang any Apache instance:
>>>>
>>>> 436875636B204E6F72726973
>>>>
>>>> --
>>>> Christopher Howard
>>>> frigidcode.com
>>>> theologia.indicium.us
>>>>
>>>
>>> Okay... How does one send it that string? I want to see this in action.
>>> ---------
>>>
>>
>> Hang around Texas and do bad stuff from 1993 through 2001.
>
> It's easy:
>
> echo "436875636B204E6F72726973" > /usr/local/sbin/httpd
>
> sudo apachectl restart
>
> Kills it dead every time for me ;)
>
> ** Your experience may vary, and could involve a re-install...
>
> --
> Tom
>
> ======================================================================
> "Z-80 system stack overflow. Shut 'er down Scotty, the system's
> sucking mud" - Error message on TRS 80 Model-16B
>
> Tom Simes simestd@netexpress.com
> ======================================================================
> ---------
> To unsubscribe, send email to <aklug-request@aklug.org>
> with 'unsubscribe' in the message body.
>

Nice! I'll keep the defibrillator ready when I give it a try... ;)
---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.
Received on Wed Nov 3 14:10:33 2010

This archive was generated by hypermail 2.1.8 : Wed Nov 03 2010 - 14:10:33 AKDT