Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 27 May 2016 20:34:56 +0100
From:      Will Squire <will_squire@hotmail.co.uk>
To:        freebsd-questions@freebsd.org
Subject:   Can ipfw be used to limit concurrent requests from an IP?
Message-ID:  <BLU436-SMTP926330783884990F4A0231DA420@phx.gbl>

index | next in thread | raw e-mail

Can ipfw limit the number requests in a given amount of time from a specific IP?

To contextualise, if an IP sends requests in high concurrency (let's say 50 a second) can ipfw either block requests the exceed a threshold for that second (lets say the threshold is 20, 30 would be blocked), or ban/deny the given IP for exceeding a threshold?

The aim is to lessen strain under DoS attacks, specifically for HTTP. The system is using Apache and mod_evasive has been added and tested, but it is not functioning correctly. 

(P.S. The freebsd-ipfw list seems to be for development of the technology only, so asking this here. Please let me know if this isn’t the case)


Thanks 

Kind regards, 

Will Squire

help

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?BLU436-SMTP926330783884990F4A0231DA420>