Re: Apache Killer From: Douglas Huff <dhuff () jrbobdobbs org> Date: Wed, 24 Aug 2011 08:40:14 -0500 I think this is a more complete rule that should be slightly more efficient and thorough even though it's 3 separate matches: RewriteEngine On RewriteCond %{HTTP:Range} bytes=0-[0-9]+, [NC,OR] RewriteCond %{HTTP:Range} bytes=([0-9-],){4,} [NC,OR] RewriteCond %{HTTP:Range} bytes=[0-9,-]+,0-(,|$) [NC
![Full Disclosure: Re: Apache Killer](https://cdn-ak-scissors.b.st-hatena.com/image/square/22af831cc01eb5c4ea7ec40c8c5d7ff4be0145a1/height=288;version=1;width=512/https%3A%2F%2Fseclists.org%2Fimages%2Ffulldisclosure-img.png)