All of lore.kernel.org
 help / color / mirror / Atom feed
From: LC Bruzenak <lenny@magitekltd.com>
To: Steve Grubb <sgrubb@redhat.com>
Cc: linux-audit@redhat.com
Subject: Re: check_second_connection stopping my recovery?
Date: Tue, 01 Dec 2009 12:27:50 -0600	[thread overview]
Message-ID: <1259692070.7603.54.camel@lcb> (raw)
In-Reply-To: <200912011310.24176.sgrubb@redhat.com>

On Tue, 2009-12-01 at 13:10 -0500, Steve Grubb wrote:
> On Wednesday 18 November 2009 06:01:10 pm LC Bruzenak wrote:
> 
> Yes, it was. With the reconnect code its possible to DoS a server, so the 
> connections need to be limited. I think the best solution is to make an admin 
> tweakable setting that defaults to 1 and you can set it to 2. Your recovery 
> technique won't be needed in the long term since its planned to have a store-
> and-forward model so nothing is lost and its automatically recovered on start 
> up.
> 
> -Steve

Steve,

Your call but it may not be worth adding a new setting.
I've already patched it out of my system, and if I'm the only one who
cares then I'd say don't worry about it.  I am aware of a DoS attack but
all senders are locked tight so I feel mitigation is sufficient. In fact
I nearly DoS-attacked myself before restricting the recovery to at most
1 process. :)

The store-and-forward piece will be excellent. It will solve at least a
couple of issues for me: recovery and also forwarding from a DMZ machine
to an internal server which will then forward to an independent
collector.

Thx,
LCB.

-- 
LC (Lenny) Bruzenak
lenny@magitekltd.com

      reply	other threads:[~2009-12-01 18:27 UTC|newest]

Thread overview: 3+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2009-11-18 23:01 check_second_connection stopping my recovery? LC Bruzenak
2009-12-01 18:10 ` Steve Grubb
2009-12-01 18:27   ` LC Bruzenak [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1259692070.7603.54.camel@lcb \
    --to=lenny@magitekltd.com \
    --cc=linux-audit@redhat.com \
    --cc=sgrubb@redhat.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.