[SM-USERS] Squirrelmaill Issue

[d***@dollartree.com]

SquirrelMail Issue: One of our users was at the Login Page and tossed
something down on their desk that kept the Enter key on their keyboard
depressed. This caused the number of httpd processes on the server to
increase at a rapid rate until the max number of 8000 httpd sessions, as
set in httpd.conf, was reached causing the webpage to no longer be
available to any other users until restarting the httpd service. I am able
to reproduce the issue by holding down on the Enter key.

SquirrelMail Version: 1.4.19
Installed Plugins:
1. administrator
2. compatibility
3. username
4. compose_extras
5. squirrelspell
6. show_headers
7. addgraphics
8. msg_flags
9. quicksave
10. timeout_user
11. unsafe_image_rules
PHP Version: 5.2.17
Web Server: Apache 2.2.17
IMAP server: Courier-IMAP 4.3.1
SMTP server: Qmail 1.0.3
OS Version: Red Hat Enterprise Linux 5.11
Installed By: Following qmailrocks.org instructions in 2009
Browser: Internet Explorer 11


Derek Wnek


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-***@lists.sourceforge.net
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

[Ted Hatfield]

Post by d***@dollartree.com
SquirrelMail Issue: One of our users was at the Login Page and tossed
something down on their desk that kept the Enter key on their keyboard
depressed. This caused the number of httpd processes on the server to
increase at a rapid rate until the max number of 8000 httpd sessions, as
set in httpd.conf, was reached causing the webpage to no longer be
available to any other users until restarting the httpd service. I am able
to reproduce the issue by holding down on the Enter key.
SquirrelMail Version: 1.4.19
1. administrator
2. compatibility
3. username
4. compose_extras
5. squirrelspell
6. show_headers
7. addgraphics
8. msg_flags
9. quicksave
10. timeout_user
11. unsafe_image_rules
PHP Version: 5.2.17
Web Server: Apache 2.2.17
IMAP server: Courier-IMAP 4.3.1
SMTP server: Qmail 1.0.3
OS Version: Red Hat Enterprise Linux 5.11
Installed By: Following qmailrocks.org instructions in 2009
Browser: Internet Explorer 11
Derek Wnek
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
-----

This sounds like a http ddos issue rather than a squirrelmail issue.
Since squirrelmail is a php application that depends on an http server to
serve data the place to limit connections is in the http layer itself.

Maybe you should look into something like mod_limitipconn to limit
requests per ip directly inside apache.

A quick google search on mod_limitipconn turns up plenty of how-tos.


Ted Hatfield

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-***@lists.sourceforge.net
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

[d***@dollartree.com]

Thanks Ted, Unfortunately, our aquirrelmail servers are behind an F5 load balancer that proxies connections so all we see on the mail servers is the IP of the load balancer. As previously stated I can reproduce the exact same problem against our test server by simply clicking in the login field and then holding down on the Enter key. I am looking for a fix that would modify the login.php to only permit a one time submit (permit only 1 submit). I am amazed that no one else has ever experienced or reported this prior to now.

r/Derek


Ted Hatfield --- Re: [SM-USERS] Squirrelmaill Issue ---
From:"Ted Hatfield" <***@io-tx.com>To:"Squirrelmail User Support Mailing List" <squirrelmail-***@lists.sourceforge.net>Date:Tue, May 2, 2017 7:05 PMSubject:Re: [SM-USERS] Squirrelmaill Issue

On Tue, 2 May 2017, ***@dollartree.com wrote:>> SquirrelMail Issue: One of our users was at the Login Page and tossed> something down on their desk that kept the Enter key on their keyboard> depressed. This caused the number of httpd processes on the server to> increase at a rapid rate until the max number of 8000 httpd sessions, as> set in httpd.conf, was reached causing the webpage to no longer be> available to any other users until restarting the httpd service. I am able> to reproduce the issue by holding down on the Enter key.>> SquirrelMail Version: 1.4.19> Installed Plugins:> 1. administrator> 2. compatibility> 3. username> 4. compose_extras> 5. squirrelspell> 6. show_headers> 7. addgraphics> 8. msg_flags> 9. quicksave> 10. timeout_user> 11. unsafe_image_rules> PHP Version: 5.2.17> Web Server: Apache 2.2.17> IMAP server: Courier-IMAP 4.3.1> SMTP server: Qmail 1.0.3> OS Version: Red Hat Enterprise Linux 5.11> Installed By: Following qmailrocks.org instructions in 2009> Browser: Internet Explorer 11>>> Derek Wnek>>> ------------------------------------------------------------------------------> Check out the vibrant tech community on one of the world's most> engaging tech sites, Slashdot.org! https://urldefense.proofpoint.com/v2/url?u=http-3A__sdm.link_slashdot&d=DwICAg&c=DQOk1h9dvX0xRcNQHKPB9_znru-_VoQNelOZTdu4ac4&r=UwwnarvPwFmVFDZqPSanaR8z_zwbBD3CHVL0bDcwvYU&m=h9UCMKt_0lsrX9UP2u1uVIgt8OA5tS64Lt3mnmz7_1A&s=wBN8xIRHzXBdoLGqww2MlHqcF87unUm_31Df8Uh55tY&e= > -----This sounds like a http ddos issue rather than a squirrelmail issue. Since squirrelmail is a php application that depends on an http server to serve data the place to limit connections is in the http layer itself.Maybe you should look into something like mod_limitipconn to limit requests per ip directly inside apache.A quick google search on mod_limitipconn turns up plenty of how-tos.Ted Hatfield------------------------------------------------------------------------------Check out the vibrant tech community on one of the world's mostengaging tech sites, Slashdot.org! https://urldefense.proofpoint.com/v2/url?u=http-3A__sdm.link_slashdot&d=DwICAg&c=DQOk1h9dvX0xRcNQHKPB9_znru-_VoQNelOZTdu4ac4&r=UwwnarvPwFmVFDZqPSanaR8z_zwbBD3CHVL0bDcwvYU&m=h9UCMKt_0lsrX9UP2u1uVIgt8OA5tS64Lt3mnmz7_1A&s=wBN8xIRHzXBdoLGqww2MlHqcF87unUm_31Df8Uh55tY&e= -----squirrelmail-users mailing listPosting guidelines: https://urldefense.proofpoint.com/v2/url?u=http-3A__squirrelmail.org_postingguidelines&d=DwICAg&c=DQOk1h9dvX0xRcNQHKPB9_znru-_VoQNelOZTdu4ac4&r=UwwnarvPwFmVFDZqPSanaR8z_zwbBD3CHVL0bDcwvYU&m=h9UCMKt_0lsrX9UP2u1uVIgt8OA5tS64Lt3mnmz7_1A&s=2y7fSzj03Szoz3eturbVPcXp7sRON41B0e_cJcYLHN0&e= List address: squirrelmail-***@lists.sourceforge.netList archives: https://urldefense.proofpoint.com/v2/url?u=http-3A__news.gmane.org_gmane.mail.squirrelmail.user&d=DwICAg&c=DQOk1h9dvX0xRcNQHKPB9_znru-_VoQNelOZTdu4ac4&r=UwwnarvPwFmVFDZqPSanaR8z_zwbBD3CHVL0bDcwvYU&m=h9UCMKt_0lsrX9UP2u1uVIgt8OA5tS64Lt3mnmz7_1A&s=ynCMOhZvLKDy6pAgnEhl8jfiYkUqpFifkoGA1stEXSQ&e= List info (subscribe/unsubscribe/change options): https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.sourceforge.net_lists_listinfo_squirrelmail-2Dusers&d=DwICAg&c=DQOk1h9dvX0xRcNQHKPB9_znru-_VoQNelOZTdu4ac4&r=UwwnarvPwFmVFDZqPSanaR8z_zwbBD3CHVL0bDcwvYU&m=h9UCMKt_0lsrX9UP2u1uVIgt8OA5tS64Lt3mnmz7_1A&s=Ht7q_L0iAdflQFyxuOuJsN6uAE203RrgKYtgJ7Zqe6A&e=
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-***@lists.sourceforge.net
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users