Not sure how it happened, but it's broken. Jamie Thinglestad initially reported some goofiness with ReverseDOS blocking requests that it shouldn't have. He was kind enough to send me some log files for analysis... and sure enough, there were some 403s where they didn't belong.
Then, today, I noticed in my logs some similar patterns. (So much for testing... ) I'll evaluate this as soon as I get a chance. Until then, ReverseDOS is out of commission. If you have 1.2, you're fine. If you have 2.1 you'll need to disable it (sorry, REALLY sorry). You can do that by making your web.config look like this:
<reverseDOS>
<settings enabled="false" >
I'll post details as soon as I have them (I'm sadly swamped with a few projects right now). I've got a few ideas on what COULD cause a problem like this... so I'll evaluate them ASAP.
Excitedly waiting for 2.2 or 3.0, whatever comes next. ReverseDOS does exactly what we need to stop the evil doers in their tracks!
Posted by: Jamie Thingelstad | July 21, 2005 at 04:54 AM
Thanks for the update! Looking forward to getting my grubby hands on 2.8! Couple of comments: * The machines I'm running my web sites on are way (way!) overpowered for their usage and I just looked at my Cacti and MRTG graphs of CPU usage and there were no increases when I had ReverseDOS 2.1 installed. Just pointing this out as I was getting 403's without the CPU being pegged or ASP.Net getting hammered. * If IIS handles 500's so much better, maybe use them instead? Does it change that much the behavior on the other side? Maybe give the user the option?
Posted by: Jamie Thingelstad | July 23, 2005 at 06:06 PM
Jamie, Thanks for hanging in there. Good to hear about the power of your box, AND the impact (none) that ReverseDOS had on performance. I'm pretty sure that the 403s on the 2.1 version were GRATUITOUS g. My lament here is that they're going to be hard to test against. Oh, and ReverseDOS
AUTHOR: Michael K. Campbell
TITLE: ReverseDOS 2.1 Broken
STATUS: Publish
ALLOW COMMENTS: 1
CONVERT BREAKS: 0
ALLOW PINGS: 1
CATEGORY: AngryPets Tools
DATE: 07/18/2005 12:29:00 AM
Posted by: Michael K. Campbell | July 23, 2005 at 09:39 PM