From: Ozgur AKAN <akan@aiqa.com>
To: Jorge Garcia <anarkophobia@latinmail.com>
Cc: "netfilter-devel@lists.netfilter.org"
<netfilter-devel@lists.netfilter.org>
Subject: Re: iptables denial of services
Date: Fri, 16 Apr 2004 10:10:37 +0300 [thread overview]
Message-ID: <407F86ED.4090706@aiqa.com> (raw)
In-Reply-To: <20040415183141.40EC43D96DC@smtp.latinmail.com>
Jorge Garcia wrote:
>I saw in the net that for examples servers like apache or smtp stop his services after a determinated numbers of connections at the same time.
>Is this a problem in iptables firewall??i mean does iptables stop filtering after handling a lot of traffic?
>
I think just the opposite would occur. The load of linux os raises to a
degree that firewall can not answer any more requests.
>The other thing i saw in the net is that it is possible to send a lot of traffic to full the log messabges of iptables and the firewall will stpo filtering so a hacker could acces to different services on the net,
>
If you mean creating too much log and filling the disk space, there is a
limit option which can limit the number of packets to log in a period of
time.
--
Ozgur Akan
next prev parent reply other threads:[~2004-04-16 7:10 UTC|newest]
Thread overview: 20+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-04-15 18:31 iptables denial of services Jorge Garcia
2004-04-16 7:10 ` Ozgur AKAN [this message]
2004-04-16 10:03 ` Henrik Nordstrom
2004-04-17 11:13 ` Friedrich Lobenstock
2004-04-17 16:49 ` Henrik Nordstrom
2004-04-17 17:22 ` question regarding iptables tuning (was Re: iptables denial of services) Friedrich Lobenstock
2004-04-17 18:18 ` Henrik Nordstrom
2004-04-17 18:53 ` Friedrich Lobenstock
2004-04-17 23:49 ` Henrik Nordstrom
2004-04-17 19:08 ` Pablo Neira
2004-04-17 19:58 ` Friedrich Lobenstock
2004-04-17 20:18 ` Friedrich Lobenstock
2004-04-17 20:33 ` Martin Josefsson
2004-04-17 20:41 ` Friedrich Lobenstock
2004-04-17 20:58 ` Martin Josefsson
2004-04-17 21:13 ` Friedrich Lobenstock
2004-04-22 12:23 ` Herve Eychenne
2004-04-22 20:44 ` Friedrich Lobenstock
2004-04-18 12:55 ` Tarek W.
2004-04-18 13:29 ` Tarek W.
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=407F86ED.4090706@aiqa.com \
--to=akan@aiqa.com \
--cc=anarkophobia@latinmail.com \
--cc=netfilter-devel@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.