From mboxrd@z Thu Jan 1 00:00:00 1970 From: Arnt Karlsen Subject: Re: chance to impress the suits Date: Fri, 28 Feb 2003 20:24:35 +0100 Sender: netfilter-admin@lists.netfilter.org Message-ID: <20030228202435.62be6828.arnt@c2i.net> References: <200302270201.04762.netfilter@newkirk.us> <20030227134810.7728c8d5.arnt@c2i.net> <20030228014041.7394bcfa.arnt@c2i.net> <20030228173420.1a1bdc11.arnt@c2i.net> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: Jason Cc: netfilter@lists.netfilter.org On Fri, 28 Feb 2003 06:53:45 -0600 (CST), Jason wrote in message : > well remember, them getting bigger boxes are to handle the number of > connections that I am giving to them. Its not a matter of TCP slowing > down, its us waiting on their application to finish and their app just > handles waits very poorly. ...effectively dos attacking itself, and with authority? How is it controlled? There must have been a control philosophy somewhere between the design stage and the upgrade of this application? ..an idea: limit the number of connections to a level the authorized dos attack app _can_ handle, and to reject or reset rather than dropping connections? -- ..med vennlig hilsen = with Kind Regards from Arnt... ;-) ...with a number of polar bear hunters in his ancestry... Scenarios always come in sets of three: best case, worst case, and just in case.