In case you have missed this: Range header DoS vulnerability Apache HTTPD 1.3/2.x http://article.gmane.org/gmane.comp.apache.announce/58 - Thomas CERT-Bund Incident Response & Anti-Malware Team