Re: [Sks-devel] simple DoS against SKS's HKP interface :/

[Peter Kornherr]

Hi,

this is what I'm doing with apache2 on keys.wuschelpuschel.org:
(part of, as I'm already proxying from :80 on several hostnames)

> hkp_address: 127.0.0.1

<VirtualHost *:11371>
        ServerName <foo>
        ServerAdmin <bar>
        <Proxy *>
                Order deny,allow
                Allow from all
        </Proxy>
        ProxyPass / http://127.0.0.1:11371/
        ProxyPassReverse / http://127.0.0.1:11371/
        SetEnv proxy-nokeepalive 1
</VirtualHost>

Seems to work fine.

Bye
        --pk

signature.asc
Description: Digital signature