From owner-freebsd-net@FreeBSD.ORG  Fri May 30 06:34:02 2003
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 8054737B401
	for <freebsd-net@freebsd.org>; Fri, 30 May 2003 06:34:02 -0700 (PDT)
Received: from duke.cs.duke.edu (duke.cs.duke.edu [152.3.140.1])
	by mx1.FreeBSD.org (Postfix) with ESMTP id C225643F93
	for <freebsd-net@freebsd.org>; Fri, 30 May 2003 06:34:01 -0700 (PDT)
	(envelope-from gallatin@cs.duke.edu)
Received: from grasshopper.cs.duke.edu (grasshopper.cs.duke.edu
	[152.3.145.30])
	by duke.cs.duke.edu (8.12.9/8.12.9) with ESMTP id h4UDY129002540
	(version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=NO);
	Fri, 30 May 2003 09:34:01 -0400 (EDT)
Received: (from gallatin@localhost)
	by grasshopper.cs.duke.edu (8.11.6/8.9.1) id h4UDXut37373;
	Fri, 30 May 2003 09:33:56 -0400 (EDT)
	(envelope-from gallatin@cs.duke.edu)
From: Andrew Gallatin <gallatin@cs.duke.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-ID: <16087.24004.208831.221102@grasshopper.cs.duke.edu>
Date: Fri, 30 May 2003 09:33:56 -0400 (EDT)
To: "Simon L. Nielsen" <simon@nitro.dk>
In-Reply-To: <20030530133052.GC414@nitro.dk>
References: <16087.23499.422415.378026@grasshopper.cs.duke.edu>
	<20030530133052.GC414@nitro.dk>
X-Mailer: VM 6.75 under 21.1 (patch 12) "Channel Islands" XEmacs Lucid
cc: freebsd-net@freebsd.org
Subject: Re: limiting connections per IP w/FreeBSD ftpd?
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 30 May 2003 13:34:02 -0000


Simon L. Nielsen writes:
 > On 2003.05.30 09:25:31 -0400, Andrew Gallatin wrote:
 > > 
 > > At my company, some bonehead (not sure if it was maliciousness or just
 > > a stupid customer), opened 60 simultaneous connections to our ftp
 > > server and totally swamped our T1.    This is the second or third time
 > > this has happened recently.
 > 
 > How about just restricting the bandwidth usage with ipfw/dummynet ?
 > 

Our firewall is elsewhere, and I don't admin it.   

As for adding it to the server itself, its an alpha, and I don't think
dummnet/ipfw are production quality on alpha...

Drew