From owner-freebsd-hubs Tue Dec 3 14: 1:53 2002 Delivered-To: freebsd-hubs@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A03CA37B401 for ; Tue, 3 Dec 2002 14:01:52 -0800 (PST) Received: from piglet.dstc.edu.au (piglet.dstc.edu.au [130.102.176.1]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7A9AA43ECD for ; Tue, 3 Dec 2002 14:01:51 -0800 (PST) (envelope-from jason@dstc.edu.au) Received: from sunburn.dstc.edu.au (sunburn.dstc.edu.au [130.102.176.16]) by piglet.dstc.edu.au (8.12.3/8.12.3) with ESMTP id gB3M1lIU008192; Wed, 4 Dec 2002 08:01:48 +1000 (EST) Date: Wed, 4 Dec 2002 08:01:47 +1000 (EST) From: jason andrade To: Lukas Ertl Cc: Joao Carlos Mendes Luis , Subject: Re: Policy question for cvsup mirrors In-Reply-To: <20021203161619.K29570-100000@pcle2.cc.univie.ac.at> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Spam-Checked: SPAMASSASSIN: This message probably not SPAM X-Spam-Score: -104.4, Required: 5 X-Virus-Scanned: Message: ok X-Scanned-By: MIMEDefang 2.9 (www dot roaringpenguin dot com slash mimedefang) Sender: owner-freebsd-hubs@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Tue, 3 Dec 2002, Lukas Ertl wrote: > On Tue, 3 Dec 2002, Joao Carlos Mendes Luis wrote: > > > ipfw add allow tcp from my-net/24 to any setup limit src-addr 10 > > ipfw add allow tcp from any to me setup limit src-addr 4 > > This sounds very interesting! Thanks for the hint... my $0.02 is to route them to the bitbucket. yes, this might be manual (though you could, with effort, automate this to scan logs and start add routes to localhost for hosts that do this). it depends on how much of an impact this is having. we have had a user trying to fetch 650M ISO images in 10Kbyte chunks. the "download accelerator" software they were using was so bad it was trying to open 65,000 connections to fetch 10K each. because the ftpd wouldn't allow this, it was opening and closing connections as fast as the machine could process this and was a horrible waste of resources for other users. regards, -jason To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hubs" in the body of the message