owl-users - prevent dos attacks of standalone services

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / community lists wiki CVSweb mirrors signatures
bringing security into open environments

Order Openwall GNU/*/Linux 2.0 on a CD with delivery worldwide

[<prev] [next>] [month] [year] [list]

Date: Thu, 24 Oct 2002 13:41:38 +0200
From: "Bernd 'beli' Liebscher" <beli@...ervice.de>
To: owl-users@...ts.openwall.com
Subject: prevent dos attacks of standalone services

hi folks!

i was searching for a tool to do some per_ip_limitations
for services running in standalone mode.

not all daemons have internal support for limiting mass
connection attempts.

vsftpd coder chris evans now includes per_ip_limiting
in his latest release v1.1.2, while release v1.0.1 is
used within owl current.

for all other services not including such a featue i
found http://www.jedi.claranet.fr/iplimit-0.9.tar.gz.

the code looks clean and simple for me.

after getting more and more massconnects to services
like sshd in the past few weeks i wanted you all
to know about a tool like that.

greets,

bernd 'beli' liebscher