Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 23 Jun 2002 10:42:43 -0700
From:      Luigi Rizzo <rizzo@icir.org>
To:        Nik Clayton <nik@FreeBSD.ORG>
Cc:        Giorgos Keramidas <keramida@FreeBSD.ORG>, hackers@FreeBSD.ORG
Subject:   Re: Limiting clients per source IP address (ftpd, inetd, etc.)
Message-ID:  <20020623104243.A5734@iguana.icir.org>
In-Reply-To: <20020623181950.A42156@clan.nothing-going-on.org>; from nik@FreeBSD.ORG on Sun, Jun 23, 2002 at 06:19:51PM %2B0100
References:  <20020621000924.GA2178@hades.hell.gr> <20020623181950.A42156@clan.nothing-going-on.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, Jun 23, 2002 at 06:19:51PM +0100, Nik Clayton wrote:
> On Fri, Jun 21, 2002 at 03:09:25AM +0300, Giorgos Keramidas wrote:
> > I've been thinking for quite some time to add per-client-IP limiting
> > to ftpd, 
> 
> I needed to do this.
> 
> Then I discovered that ipfw's "limit" directive lets you limit the
> number of incoming connections, which proved much more powerful.

the funny thing is that when i implemented it i thought it
was completely useless :)

As a matter of fact, I still think that, at least for resource
management purposes.  It may have its good use for protection against
denial-of-service attacks though.

	cheers
	luigi

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020623104243.A5734>