ãí¥ï ç¤¥í¥¨ïª <aelmahmo...@sabily.org> ha escrit:

> > The "Match everything (experimental)" strategy is not suited for
> > production servers, as its name says, and consume all CPU, leading
> > to an easy DOS attack method.

Any implementation of "match everything" strategy is potentially harmful
and certainly not suited for production servers. I thought it was obvious.

> There is no way to deactivate it,

No, there is:

strategy all {
  deny-all yes;
}

See the manual, section 3.3.12 "Strategies and Default Searches" [1]

Regards,
Sergey

[1] http://dico.prog.gnu.org.ua/manual/html_section/Configuration.html#SEC29



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to