<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=utf-8">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7652.24">
<TITLE>Re: fedora live images dos attack?</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/plain format -->
<P><FONT SIZE=2>I am seeing the exact same behavior on my mirror. I am curious on how the jidgo downloads look in an apache log. I have never used the program but from what I could find in a quick 1 min google session it pulls files right out of the isos. <BR>
<BR>
This may be what we are seeing. <BR>
<BR>
<BR>
<BR>
----- Original Message -----<BR>
From: mirror-list-d-bounces@redhat.com <mirror-list-d-bounces@redhat.com><BR>
To: A private discussion group for official mirrors of ftp.redhat.com <mirror-list-d@redhat.com><BR>
Sent: Mon May 19 07:29:31 2008<BR>
Subject: Re: fedora live images dos attack?<BR>
<BR>
On Sun, 18 May 2008, Paul Mezzanini wrote:<BR>
> Do they all have various resume ranges? Could be the worst download<BR>
> accelerator ever built :)<BR>
<BR>
yes, they all have different resume ranges and are logged as 206 messages. <BR>
nothing could be that bad by design. also, none of the dowload requests<BR>
are preceded by a normal 'visit' to the site and navigating through to the<BR>
image location - it all starts straight with the (partial) download<BR>
request.<BR>
<BR>
--<BR>
sriram<BR>
<BR>
--<BR>
</FONT>
</P>
</BODY>
</HTML>