Setting request URI length limit

I have Apache 2.2.4 installed on Windows 2000 pro. When I receive a request
longer than 8192 (I think), the server responds with a 414 (Request URI too
long) error. That's fine, but I would like to know if it is adjustable (likely
downward), and if it can be set for a specific method (GET, POST, SEARCH).

This caught my interest because of a repeated exploit attempt I get which is
actually aimed at an IIS server. The exploit, which is probably trying to
overrun a buffer, sends a SEARCH request with about 32 KB of binary garbage.
Apache is handling the situation with no problem, but I'm a control freak. :-)
--
Crash

Re: Setting request URI length limit

On Aug 8, 7:03 am, "\"Crash\" Dummy" wrote:
> I have Apache 2.2.4 installed on Windows 2000 pro. When I receive a request
> longer than 8192 (I think), the server responds with a 414 (Request URI too
> long) error. That's fine, but I would like to know if it is adjustable (likely
> downward), and if it can be set for a specific method (GET, POST, SEARCH).
>
> This caught my interest because of a repeated exploit attempt I get which is
> actually aimed at an IIS server. The exploit, which is probably trying to
> overrun a buffer, sends a SEARCH request with about 32 KB of binary garbage.
> Apache is handling the situation with no problem, but I'm a control freak. :-)
> --
> Crash

Check out the LimitRequestLine directive under Apache.

http://httpd.apache.org/docs/2.2/mod/core.html#limitrequestl ine

Or else you can also hack this pre-compile time.

Thanks

Mike

Re: Setting request URI length limit

> Check out the LimitRequestLine directive under Apache.

Thank you. That's what I am looking for.
--
Crash
Windows 2000 Pro - Apache 2.2.4 - PHP 5.2.1 - PERL 5.8.8

Reply to group only. E-mail is blocked.