Re: [users@httpd] Re:Re: [users@httpd] how to block the duplicated requests?

2015-05-19 Thread Kurtis Rader
On Tue, May 19, 2015 at 8:22 AM, javalishixml wrote: > I see you speak "Though those modules exist, this might be best > implemented in your application" > How can I understand it? I should write a c program for apache? or I > should write some java web application at tomcat level? > Because this

Re: [users@httpd] Re:Re: [users@httpd] how to block the duplicated requests?

2015-05-19 Thread Yehuda Katz
I would recommend that you write it into your java application. An application that does a "lottery" with each request should probably include rate-limiting itself. That way, if you ever make changes, all the logic of the application is in one place. - Y Sent from a gizmo with a very small keyboa

[users@httpd] How to use ScoreBoardFile?

2015-05-19 Thread Bill Moseley
I'm running Apache/2.2.15 (Unix) as prefork. In my httpd.conf I have: LoadModule status_module modules/mod_status.so ExtendedStatus On ScoreBoardFile /home/bill/scoreboard.score SetHandler server-status Allow from All I can then go to /server-status and see the scoreboard data just f

[users@httpd] Re:Re: [users@httpd] how to block the duplicated requests?

2015-05-19 Thread javalishixml
Great thank you, Yehuda. I see you speak "Though those modules exist, this might be best implemented in your application" How can I understand it? I should write a c program for apache? or I should write some java web application at tomcat level? Because this is a web site, it has to face co

Re: [users@httpd] how to block the duplicated requests?

2015-05-19 Thread Yehuda Katz
There are a few modules that you might be able to modify to meet your needs - although these things are generally designed for DDoS protection. - mod_security - http://www.modsecurity.org/ - mod_evasive - http://www.zdziarski.com/blog/?page_id=442 - mod_cband - http://dembol.org/blog/mod_

Re: [users@httpd] Proxy pass fails with Spring Security

2015-05-19 Thread Eric Covener
On Mon, May 18, 2015 at 11:59 PM, Reid Watson wrote: > I don’t have direct access the backend server but would like to know if > someone has come across a similar issue ? Bad redirect or cookie path/domain? See ProxyPassReverse* -- Eric Covener cove...@gmail.com -

[users@httpd] how to block the duplicated requests?

2015-05-19 Thread javalishixml
Hi, I have a website. It is built by apache + tomcat. Now we make a lottery activity at this website. But we find that some robots always raise the duplicated requests to hit this lottery activity. It causes that robots almost get all the awards. So we just want to block these kind of duplicat