Re: tcpsvd - Allow only x connections from somebody/hour

From: "Clemens Fischer" <[email protected]>
Sent: Saturday, November 27, 2004 4:40 PM

>* 2004-08-26 Gerrit Pape:
>
>> On Wed, Aug 25, 2004 at 03:27:26PM +0200, Maurice Lucas wrote:
>>> I want to adjust my tcpsvd service to allow only a fixed amount of 
>>> maximum
>>> connections from an IP address a hour.
>>
>>> Is there some way to do this using tcpsvd?
>>
>> It's not a built-in feature of tcpsvd, no.  But it should be possible to 
>> do
>> such things with a separate program put into the process chain between
>> tcpsvd and the service program.  It gathers the necessary information, 
>> and
>> execs into the service program, or doesn't, based on this information.
>
> i just thought about this.  what would be the best database-implementation 
> to
> keep the IP/connection# tuples?  maurice, do you have less than a few 
> dozen or
> more than thousands of IPs connecting?  anyway, it might be easy to make a
> little program keeping those tuples in a hash and do the exec(2)'ing, as 
> the
> relevant information is readily available:
>


I don't get a lot of connections/hour in a normal event* but I asked because 
when I'm the victim of a joe job I don't want my server to go to his knees. 
Nor do I want to waste to much bandwidth.


* approx 1200/day => 50/hour => 0.83/minute

With kind regards,
Met vriendelijke groet,

Maurice Lucas
TAOS-IT