All of lore.kernel.org
 help / color / mirror / Atom feed
From: Arnt Karlsen <arnt@c2i.net>
To: Jason <baker@cyborgworkshop.com>
Cc: netfilter@lists.netfilter.org
Subject: Re: chance to impress the suits
Date: Sat, 1 Mar 2003 18:39:29 +0100	[thread overview]
Message-ID: <20030301183929.5a56ee54.arnt@c2i.net> (raw)
In-Reply-To: <Pine.LNX.4.50.0302282003460.20817-100000@alfred.home.cyborgworkshop.com>

On Fri, 28 Feb 2003 20:04:44 -0600 (CST), 
Jason <baker@cyborgworkshop.com> wrote in message 
<Pine.LNX.4.50.0302282003460.20817-100000@alfred.home.cyborgworkshop.co
m>:

> > ..an idea: limit the number of connections to a level the authorized
> > dos attack app _can_ handle, and to reject or reset rather than
> > dropping connections?
> 
> That is what I hope to do with the iptables box running iplimit. 
> Except instead of rejecting the connections Im going to redirect users
> to a static page that just pretty much says "we're busy try again"
> 

..can the authorized dos attack application use this to back off?
Failing that, try kill off its old no-longer-used connections.

-- 
..med vennlig hilsen = with Kind Regards from Arnt... ;-)
...with a number of polar bear hunters in his ancestry...
  Scenarios always come in sets of three: 
  best case, worst case, and just in case.




  reply	other threads:[~2003-03-01 17:39 UTC|newest]

Thread overview: 12+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2003-02-26 23:57 chance to impress the suits Jason
2003-02-27  7:01 ` Joel Newkirk
2003-02-27 12:48   ` Arnt Karlsen
2003-02-27 14:17     ` Jason
2003-02-28  0:40       ` Arnt Karlsen
2003-02-27 21:21         ` Jason
2003-02-28 16:34           ` Arnt Karlsen
2003-02-28 12:53             ` Jason
2003-02-28 19:24               ` Arnt Karlsen
2003-03-01  2:04                 ` Jason
2003-03-01 17:39                   ` Arnt Karlsen [this message]
2003-02-27 14:11   ` Jason

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20030301183929.5a56ee54.arnt@c2i.net \
    --to=arnt@c2i.net \
    --cc=baker@cyborgworkshop.com \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.