{scrollbar}

DoS(Denial of Services) is one of the most common attacking method, which issues lots of request and exhaust free memory of the application server. The server will crash down due to out of memory problem eventually. In Geronimo, You can swap inactive sessions to a file or just forget them. You can keep a certain number of sessions in main memory configurable via System configuration console.

Configuring session manager

...