From owner-freebsd-questions  Mon Feb  5  8:25:14 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from be-well.ilk.org (lowellg.ne.mediaone.net [24.147.184.128])
	by hub.freebsd.org (Postfix) with ESMTP id 0280837B503
	for <freebsd-questions@freebsd.org>; Mon,  5 Feb 2001 08:24:55 -0800 (PST)
Received: (from lowell@localhost)
	by be-well.ilk.org (8.11.2/8.11.2) id f15GOrx13605;
	Mon, 5 Feb 2001 11:24:53 -0500 (EST)
	(envelope-from lowell)
To: freebsd-questions@freebsd.org
Subject: Re: Limiting connections w/ ftpd
References: <009d01c08f3d$f7a77de0$0101a8c0@pavilion> <20010205084218.A19317@billygoat.slb.to>
From: Lowell Gilbert <lowell@world.std.com>
Date: 05 Feb 2001 11:24:53 -0500
In-Reply-To: lucas@slb.to's message of "5 Feb 2001 15:45:19 +0100"
Message-ID: <44ae81ayi2.fsf@lowellg.ne.mediaone.net>
Lines: 18
X-Mailer: Gnus v5.7/Emacs 20.7
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

lucas@slb.to (Lucas Bergman) writes:

> > I've been recently getting flooded with connections via ftp, and I
> > was wondering how to limit ftp connections per IP address to stop
> > "connection floods" from a single host name. I can't find much
> > documentation on the standard FreeBSD "ftpd" that explains how this
> > would be done.
> 
> ftpd doesn't know how many simultaneous connections are being made,
> since each ftpd only handles one connection; inetd handles the
> starting of multiple daemons.  Stock inetd does not have a facility
> for concurrency limits.  You'll have to use /TCP Wrappers/ or
> /ucspi-tcp/; they're both in ports.  I've used /ucspi-tcp/ with good
> results.

True, but by default, FreeBSD starts ftpd through inetd, which
supports both absolute and rate-limited connection controls.
inetd.conf(8) should be able to handle it just fine.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message