Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 16 Mar 2001 07:15:12 -0800
From:      Ron 'The InSaNe One' Rosson <insane@lunatic.oneinsane.net>
To:        freeBSD-security@freeBSD.org
Subject:   Re: Multiple vendors FTP denial of service (fwd)
Message-ID:  <20010316071511.A46313@lunatic.oneinsane.net>
In-Reply-To: <20010315215913.A70990@mollari.cthul.hu>; from kris@obsecurity.org on Thu, Mar 15, 2001 at 09:59:13PM -0800
References:  <98righ$100l$1@FreeBSD.csie.NCTU.edu.tw> <004b01c0ada9$99f7b540$db9497cf@singingtree.com> <20010315215913.A70990@mollari.cthul.hu>

next in thread | previous in thread | raw e-mail | index | archive | help
Kris Kennaway (kris@obsecurity.org) wrote:
> On Thu, Mar 15, 2001 at 03:42:29PM -0800, Michael A. Dickerson wrote:
> > > 4.1 from Aug 10th is hurt by it.
> > >
> > >          ---Mike
> > >
> > 
> > So is 4.3-beta (otherwise known as 4-stable) from March 8.  ftpd uses 100%
> > cpu and memory use grows until the kernel runs out of swap space and starts
> > killing processes.  This was an ftp connection with a regular username and
> > password, in an average home directory.
> 
> I'm pretty sure (but haven't tested) that resource limits will prevent
> this problem.  Your ftpd shouldn't be using large amount of memory
> under normal operating procedures, so you can set those to reasonable
> values and not suffer any ill effects.
> 
> Kris

But, by default are the resource limits set properly to avoid this out
of the box? Or does one have to make the mod themselves.

TIA

-- 
------------------------------------------------------------------------------
Ron Rosson          			      ... and a UNIX user said ...
The InSaNe One                 			      rm -rf *
insane@oneinsane.net     	            and all was /dev/null and *void()
------------------------------------------------------------------------------
daemon(n): 1. an attendant power or spirit : GENIUS
           2. the cute little mascot of the FreeBSD operating system

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010316071511.A46313>