Date: Sat, 24 Nov 2007 09:29:56 -0600 From: JD Bronson <jbronson@sixcompanies.com> To: Zhang Weiwu <zhangweiwu@realss.com> Cc: freebsd-questions@freebsd.org Subject: Re: how to fight concurrent connection DOS attack to FreeBSD ftpd? Message-ID: <20071124152956.49C20DA839@cheyenne.hanadarko.com> In-Reply-To: <47483686.3030400@realss.com> References: <47483686.3030400@realss.com>
next in thread | previous in thread | raw e-mail | index | archive | help
At 10:34 PM 11/24/2007 +0800, Zhang Weiwu wrote: >Dear all > >I run a ftp site which is being attacked by someone who issue some 1000 >concurrent connection for downloading as anonymous. How can I fight back? how about controlling access via pf? you can limit the number of connections from the SAME IP and/or number of connections from the SAME IP over a given time... Or just block the IP and be done with it? We use this method for controlling attacks on SSH port 22 but it could also be used for any type of needed control. the items of value under pf are: max-src-conn max-src-conn-rate flush flush global hth -JD
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20071124152956.49C20DA839>