Date: 05 Feb 2001 11:24:53 -0500 From: Lowell Gilbert <lowell@world.std.com> To: freebsd-questions@freebsd.org Subject: Re: Limiting connections w/ ftpd Message-ID: <44ae81ayi2.fsf@lowellg.ne.mediaone.net> In-Reply-To: lucas@slb.to's message of "5 Feb 2001 15:45:19 %2B0100" References: <009d01c08f3d$f7a77de0$0101a8c0@pavilion> <20010205084218.A19317@billygoat.slb.to>
next in thread | previous in thread | raw e-mail | index | archive | help
lucas@slb.to (Lucas Bergman) writes: > > I've been recently getting flooded with connections via ftp, and I > > was wondering how to limit ftp connections per IP address to stop > > "connection floods" from a single host name. I can't find much > > documentation on the standard FreeBSD "ftpd" that explains how this > > would be done. > > ftpd doesn't know how many simultaneous connections are being made, > since each ftpd only handles one connection; inetd handles the > starting of multiple daemons. Stock inetd does not have a facility > for concurrency limits. You'll have to use /TCP Wrappers/ or > /ucspi-tcp/; they're both in ports. I've used /ucspi-tcp/ with good > results. True, but by default, FreeBSD starts ftpd through inetd, which supports both absolute and rate-limited connection controls. inetd.conf(8) should be able to handle it just fine. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?44ae81ayi2.fsf>