Ok, I admit this may be a little out of topic, but it is related a bit with system security. I am using apache 1.3 of SuSE 8.2 distribution for running a web site. Now the system it gets occasionally hacked, with various methods but I want a little help about one specific of them. It seems that somehow the hackers out there, can make my system to run out of semaphores, under a common DOS attack. I am using semaphores also into the site's cgi code, but I suppose that under normal circumastances no more that 20 to 40 are needed for all of the running CGIs. But when they attack my server, it successfully runs out of semaphores, causing both cgi and sometimes apache to malfunction or get completely down. Last night's attempt made that obvious message to be written in apache's error log: semget: No space left on device So what I need, is if I can raise the available number of semaphores, so to be more available for preventing such kind of attacks. Where's the system's semaphore configuration file? Also I may need to raise the number of file descriptors or set 'em to unlimited. How I can do this? Any kind of help would be appriciated. Regards Nicholas
Hi !
Last night's attempt made that obvious message to be written in apache's error log:
semget: No space left on device
So what I need, is if I can raise the available number of semaphores, so to be more available for preventing such kind of attacks. Where's the system's semaphore configuration file? Also I may need to raise the number of file descriptors or set 'em to unlimited. How I can do this?
Any kind of help would be appriciated.
--> Google is your friend. Search for the complete error message and you will find explanations and solutions. The second link gave me a command to increase the space for semaphores, further down the list I found the hint to go search on www.apache.org to learn more about how this error can happen. Enjoy the available documentation... Cheers, Armin -- Am Hasenberg 26 office: Institut für Atmosphärenphysik D-18209 Bad Doberan Schloss-Straße 6 Tel. ++49-(0)38203/42137 D-18225 Kühlungsborn / GERMANY Email: schoech@iap-kborn.de Tel. +49-(0)38293-68-102 WWW: http://armins.cjb.net/ Fax. +49-(0)38293-68-50
participants (2)
-
Armin Schoech
-
Nicholas Sideris