* Handling large list of rules - Efficient or not?
@ 2008-05-17 14:28 howard chen
2008-05-17 15:59 ` lists+netfilter
0 siblings, 1 reply; 2+ messages in thread
From: howard chen @ 2008-05-17 14:28 UTC (permalink / raw)
To: netfilter
My server sometimes is under attack by DDOS, so I want to make a
simple script which read the log (Apache access log), do the analysis,
and set the rule to drop the packets from a specific IP.
Since it is DDOS, so I assume there will be large ammount of unique IP
needed to be input into the iptables.
I want to know, are there any hidden efficiency problem in this setup?
Or any better method?
Howard.
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: Handling large list of rules - Efficient or not?
2008-05-17 14:28 Handling large list of rules - Efficient or not? howard chen
@ 2008-05-17 15:59 ` lists+netfilter
0 siblings, 0 replies; 2+ messages in thread
From: lists+netfilter @ 2008-05-17 15:59 UTC (permalink / raw)
To: howard chen; +Cc: netfilter
howard chen wrote:
> My server sometimes is under attack by DDOS, so I want to make a
> simple script which read the log (Apache access log), do the analysis,
> and set the rule to drop the packets from a specific IP.
>
> Since it is DDOS, so I assume there will be large ammount of unique IP
> needed to be input into the iptables.
>
> I want to know, are there any hidden efficiency problem in this setup?
> Or any better method?
>
>
> Howard.
> --
> To unsubscribe from this list: send the line "unsubscribe netfilter" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at http://vger.kernel.org/majordomo-info.html
>
Haven't we had this discussion several times in the very recent past?
See the archives.
Hint: if the list is really large use ipsets.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2008-05-17 15:59 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2008-05-17 14:28 Handling large list of rules - Efficient or not? howard chen
2008-05-17 15:59 ` lists+netfilter
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox