[IRCServices] what do they think ?

Andrew Church achurch at dragonfire.net
Sat Oct 9 10:41:48 PDT 1999


>Why not use popen() and open a pipe to sendmail, pipe in the information
>and then close the pipe?  That way sendmail spawns off a new process,
>without requiring the addition of timeout handling etc.

     This requires the overhead of spawning a new process for every
request, which can lead to a denial of resources attack on the whole
system if someone really tries, as opposed to a DoS on Services alone.
(You could get around this by imposing a process limit.)  It also relies
on the fact that the machine running Services has a sendmail that works
the way you expect--this is not a given, believe it or not.

>For the record, it's a proven concept that the above method will work -
>StarChat (around 1000 concurrent connections at night).

     "Works" and "works under all conditions" aren't quite the same thing.
If your code works for you, fine; but for a program designed to work
across many different environments such as Services, "works" just isn't
enough.

  --Andrew Church
    achurch at dragonfire.net
    http://achurch.dragonfire.net/
---------------------------------------------------------------
To unsubscribe, send email to majordomo at ender.shadowfire.org
with "unsubscribe ircservices" in the body, without the quotes.