From owner-freebsd-current@FreeBSD.ORG Fri Jul 16 23:04:47 2010 Return-Path: Delivered-To: freebsd-current@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 5BFF61065672 for ; Fri, 16 Jul 2010 23:04:47 +0000 (UTC) (envelope-from freebsd-current-local@be-well.ilk.org) Received: from mail5.sea5.speakeasy.net (mail5.sea5.speakeasy.net [69.17.117.49]) by mx1.freebsd.org (Postfix) with ESMTP id 338968FC0A for ; Fri, 16 Jul 2010 23:04:46 +0000 (UTC) Received: (qmail 16141 invoked from network); 16 Jul 2010 23:04:46 -0000 Received: from dsl092-078-145.bos1.dsl.speakeasy.net (HELO be-well.ilk.org) ([66.92.78.145]) (envelope-sender ) by mail5.sea5.speakeasy.net (qmail-ldap-1.03) with SMTP for ; 16 Jul 2010 23:04:46 -0000 Received: from lowell-desk.lan (lowell-desk.lan [172.30.250.6]) by be-well.ilk.org (Postfix) with ESMTP id 4E55650829; Fri, 16 Jul 2010 19:04:38 -0400 (EDT) Received: by lowell-desk.lan (Postfix, from userid 1147) id 7F2E21CC8A; Fri, 16 Jul 2010 19:04:38 -0400 (EDT) From: Lowell Gilbert To: Alex Kozlov References: <20100716143621.GA9281@ravenloft.kiev.ua> Date: Fri, 16 Jul 2010 19:04:38 -0400 In-Reply-To: <20100716143621.GA9281@ravenloft.kiev.ua> (Alex Kozlov's message of "Fri, 16 Jul 2010 17:36:21 +0300") Message-ID: <44k4ov6nax.fsf@lowell-desk.lan> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/23.2 (berkeley-unix) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: freebsd-current@FreeBSD.org, Gabor Kovesdan Subject: Re: periodic script in base system to run csup X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Jul 2010 23:04:47 -0000 Alex Kozlov writes: > On Fri, Jul 16, 2010 at 04:27:39PM +0200, Gabor Kovesdan wrote: >> Em 2010.07.16. 16:23, Alex Kozlov escreveu: >> > On Fri, Jul 16, 2010 at 03:58:33PM +0200, Gabor Kovesdan wrote: >> > >> > Thousands pc simultaneously try to access cvsup servers? >> > Sound like a ddos to me. >> Yes, this was the only concern and that's why I started this discussion. > And because its periodic, We can't use portsnap solution (random delay > before csup start). It's not completely impossible; periodic could spin off a separate shell for it, with a random delay. It's not clear what the best way to deal with the output would be, although several approaches present themselves. It would be a lot more complicated than Gabor's approach, though.