Date: Fri, 30 May 2003 09:25:31 -0400 (EDT) From: Andrew Gallatin <gallatin@cs.duke.edu> To: freebsd-net@freebsd.org Subject: limiting connections per IP w/FreeBSD ftpd? Message-ID: <16087.23499.422415.378026@grasshopper.cs.duke.edu>
next in thread | raw e-mail | index | archive | help
At my company, some bonehead (not sure if it was maliciousness or just a stupid customer), opened 60 simultaneous connections to our ftp server and totally swamped our T1. This is the second or third time this has happened recently. So I'm looking for some way to limit the number of connections per-IP. I understand this may be bad for sites behind NAT boxes, or for multiuser systems, and I don't want to start a thread debating its merits. I'd like to avoid downgrading to one of the swiss-army knife ftpds that always seems to have a vulnerability in the headlines, but I don't have time to hack FreeBSD ftpd myself. So: Does anybody have patches to allow FreeBSD's ftpd to limit connections per IP? Or am I stuck with proftpd or wuftpd Thanks, Drew
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?16087.23499.422415.378026>