Date: Fri, 18 Feb 2000 03:56:25 +0900 From: "Daniel C. Sobral" <dcs@newsguy.com> To: "Jordan K. Hubbard" <jkh@FreeBSD.org> Cc: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/etc hosts.allow Message-ID: <38AC4459.3844ADBA@newsguy.com> References: <200002170452.UAA27223@freefall.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
"Jordan K. Hubbard" wrote: > > jkh 2000/02/16 20:52:24 PST > > Modified files: > etc hosts.allow > Log: > The default rule in this file actually sent mail to root as its default > action when denying access to a service. Unfortunately, this also makes > a dandy denial-of-service attack possible. Change to just log the event > and shoot a "go away" response back down the socket. Isn't silently dropping the packet a much more efficient way of dealing with DoS attacks? -- Daniel C. Sobral (8-DCS) dcs@newsguy.com dcs@freebsd.org "If you consider our help impolite, you should see the manager." To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?38AC4459.3844ADBA>