From 33bbb7c658b6c91b9448a1777d09adc283bf635a Mon Sep 17 00:00:00 2001 From: "Rob Swindell (on Windows 11)" <rob@synchro.net> Date: Tue, 19 Dec 2023 21:09:11 -0800 Subject: [PATCH] Decrease the web server default MaxClients value from unlimited to 100 clients Every server should have *some* limit to protect against DOS attacks. Every connected client consumes a socket, a thread, some memory, none of which are infinite resources. --- src/sbbs3/websrvr.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/sbbs3/websrvr.h b/src/sbbs3/websrvr.h index bdc0a6fde1..92c8f9b724 100644 --- a/src/sbbs3/websrvr.h +++ b/src/sbbs3/websrvr.h @@ -30,7 +30,7 @@ typedef struct { STARTUP_COMMON_ELEMENTS uint16_t max_clients; -#define WEB_DEFAULT_MAX_CLIENTS 0 /* 0=unlimited */ +#define WEB_DEFAULT_MAX_CLIENTS 100 /* 0=unlimited */ uint16_t max_inactivity; #define WEB_DEFAULT_MAX_INACTIVITY 120 /* seconds */ uint16_t max_cgi_inactivity; -- GitLab