[AMQ-498] Secure the server from simple DoS attacks

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 5.6.0
• Component/s: Broker

Environment

An untrusted network. DoS attack attempts are common.

• Assignee: Hiram R. Chirino
• Reporter: Hiram R. Chirino
• Created: 18/Jan/06 23:53
• Updated: 25/Sep/12 11:41
• Resolved: 09/Jun/11 16:33

Description

Originating from http://forums.logicblaze.com/posts/list/205.page

Simply start the 4.0 server (I used the stock config)

in another window telnet to localhost 61616

you will receieve:
ActiveMQ^[[?1;2c

type asdfasdf

The connection will close by itself.

All future TCP connections, either from telnet or from real JMS clients, will hang.

Issue Links

• breaks: AMQ-4076 sizePrefixDisabled and/or maxFrameSize change in AcriveMq 5.6 broke FilePendingMessageCursor for big messages