Difference between revisions of "HIDS 30113"
From Atomicorp Wiki
(Created page with "'''Rule ID''' 30113 '''Status''' Active rule currently published '''Description''' This rule reports when Apache has completely rejected a connection from a client, and ...") |
m |
||
| Line 10: | Line 10: | ||
'''Description''' | '''Description''' | ||
| − | This rule reports when Apache has completely rejected a connection from a client, and Apache has determined the method used is Invalid. | + | This rule reports when Apache has completely rejected a connection from a client, and Apache has determined the method used is Invalid. [[ASL]] does not cause this, this is simply a reporting rule, and disabling this rule will not prevent Apache from rejecting these invalid connections. |
| − | + | ||
| − | + | ||
Certain DOS attacks use this method to use up all file handles in use on the system. | Certain DOS attacks use this method to use up all file handles in use on the system. | ||
Revision as of 13:46, 16 December 2013
Rule ID
30113
Status
Active rule currently published
Description
This rule reports when Apache has completely rejected a connection from a client, and Apache has determined the method used is Invalid. ASL does not cause this, this is simply a reporting rule, and disabling this rule will not prevent Apache from rejecting these invalid connections.
Certain DOS attacks use this method to use up all file handles in use on the system.
False Positives
None. This rule simply reports when Apache has rejected the connection because it is using an invalid method.
Tuning Recommendations
None.
