Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 12 Jan 2000 18:26:37 +0200
From:      Sheldon Hearn <sheldonh@uunet.co.za>
To:        "Mr. K." <bsd@inbox.org>
Cc:        questions@FreeBSD.ORG
Subject:   Re: limit connections per IP? 
Message-ID:  <84894.947694397@axl.noc.iafrica.com>
In-Reply-To: Your message of "Wed, 12 Jan 2000 11:12:47 EST." <Pine.BSF.3.96.1000112111121.15989A-100000@inbox.org> 

next in thread | previous in thread | raw e-mail | index | archive | help


On Wed, 12 Jan 2000 11:12:47 EST, "Mr. K." wrote:

> Is there a way (perhaps with ipfw?) to limit the number of connections an
> IP address can make to your system?  This seems to be the only way to
> handle a DOS attack from filling up your listen queue.

Depends on the software.  If you start things up out of inetd(8), then
there's per-service and global rate-limiting available.  Consult the
inetd(8) manual page for details.

Otherwise, the options available to you are application specific and thus
effective only on a per-service basis, if at all.

Ciao,
Sheldon.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?84894.947694397>