From owner-freebsd-questions Mon Sep 25 7:33:41 2000 Delivered-To: freebsd-questions@freebsd.org Received: from tonnant.cnchost.com (tonnant.concentric.net [207.155.248.72]) by hub.freebsd.org (Postfix) with ESMTP id A61A937B422 for ; Mon, 25 Sep 2000 07:33:38 -0700 (PDT) Received: from reif.cncdsl.com (w015.z064000220.phl-pa.dsl.cnc.net [64.0.220.15]) by tonnant.cnchost.com id KAA00176; Mon, 25 Sep 2000 10:33:37 -0400 (EDT) [ConcentricHost SMTP Relay 1.10] Message-ID: <39CF6209.5AAD0F8D@reif.cncdsl.com> Date: Mon, 25 Sep 2000 10:32:41 -0400 From: webmaster Reply-To: treif1@netaxs.com X-Mailer: Mozilla 4.72 [en] (Win98; I) X-Accept-Language: en MIME-Version: 1.0 To: freebsd-questions@FreeBSD.ORG Subject: question Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG I have searched extensively for info on this subject and have found nothing. I admin a server which gets allot of bad requests daily. In fact, it has over 400 meg in bad log files daily. I asked a real Unix guru about the problem and he recommended using tar pitting. The idea is that every time a bad request is generated by an I.P. the time the server takes to respond is increased. Example: Bad request #1. server answers with 401 error in 1 second Bad request #1. server answers with 401 error in 2 seconds Bad request #1. server answers with 401 error in 4 seconds This sounds like the perfect answer to many problems with a variety of server attacks. The problem is I can only find info on the subject relating to spam mail and sendmail. Any help would be extremely appreciated. Thanks in advance for your time. Terry Reifsnyder Please RE: treif1@netaxs.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message