From owner-freebsd-isp Fri Nov 5 10:14:25 1999 Delivered-To: freebsd-isp@freebsd.org Received: from richard2.pil.net (richard2.pil.net [207.8.164.9]) by hub.freebsd.org (Postfix) with SMTP id AAA9F14D71 for ; Fri, 5 Nov 1999 10:14:22 -0800 (PST) (envelope-from up@pil.net) Received: (qmail 9382 invoked by uid 1825); 5 Nov 1999 18:13:52 -0000 Date: Fri, 5 Nov 1999 13:13:52 -0500 (EST) From: X-Sender: up@richard2.pil.net To: Mike Tancsa Cc: freebsd-isp@freebsd.org Subject: Re: login.conf and resource limits In-Reply-To: <4.1.19991105075939.04a79ec0@granite.sentex.ca> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Fri, 5 Nov 1999, Mike Tancsa wrote: > At 11:36 PM 11/4/99 , up@3.am wrote: > > > >I got news for you, that ain't going to stop the DoS. Compile and run > >this code as a user from your shellu class It will crash your server, so > >don't do it on a production box (BTW, I had checked the security list > >archives and saw a thread on this, but no answers that worked): > > Yes, I know it does not prevent that... See the discussion in current as to > the upcoming fix. There is also the mmap DOS. I believe there is a fix for > that in Current, but not STABLE. It wasnt clear in your original post that > you wanted to prvent this particular DOS, which is not possible right now. Would you mind letting me know the thread subject and rough dates? I've tried searching and browsing through the last few weeks and see nothing in the archives for -current or -security... Thanks, James Smallacombe PlantageNet, Inc. CEO and Janitor up@3.am http://3.am ========================================================================= ISPF 3 - The Forum for ISPs by ISPs(tm) || Nov 15-17, 1999, New Orleans 3 days of clues, news, and views from the industry's best and brightest. Visit for information and registration. ========================================================================= To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message