Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 16 Mar 2001 19:39:08 +0100 (CET)
From:      Paul Herman <pherman@frenchfries.net>
To:        Peter Pentchev <roam@orbitel.bg>
Cc:        Anil Jangity <aj@entic.net>, <freebsd-security@FreeBSD.ORG>
Subject:   Re: Multiple vendors FTP denial of service
Message-ID:  <Pine.BSF.4.33.0103161935410.9463-100000@husten.security.at12.de>
In-Reply-To: <20010316202837.C428@ringworld.oblivion.bg>

next in thread | previous in thread | raw e-mail | index | archive | help
Hi Peter,

On Fri, 16 Mar 2001, Peter Pentchev wrote:

> It might not be easy to do this via login.conf; if you are running your
> ftpd via inetd, though, you can use /usr/bin/limits to do that:
>
> ftp stream tcp nowait root /usr/bin/limits ftpd -d10K /usr/libexec/ftpd -l

  ftp stream tcp nowait root/login.class /usr/libexec/ftpd ftpd -l

(where login.class is in /etc/login.conf) will also do the trick.

> Having said that, I, too, haven't tested whether setting resource
> limits eliminates the original problem.

It it seems to when the CPU is limited, but as shown in a previous
mail, apparently not when the memory is.  Hmmm...

-Paul.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.33.0103161935410.9463-100000>