Seems like the wrong patch was used to fix the dos-issue. I think [1] is the correct one. [1] http://trac.lighttpd.net/trac/attachment/ticket/285/committed-patch-1.4.19.patch