[Proftpd-user] Limiting number of TCP connections per host

Cosmin Neagu via Proftp-user <[email protected]> Mon, 4 Jul 2022 14:31:10 +0300

Newsgroups	gmane.network.proftpd.user
Message-ID	<CAA8U1-8N4EHV-EoOSb87Prf-uQC8=8ERVuHMNojtGMrtUoHbZw@mail.gmail.com>

Hi Guys,
I noticed that for each tcp new session, a new proftpd process gets spanned
- just 3-way handshake, no other FTP commands being sent.
I'm searching for a way (other than through iptables) to control the number
of allowed TCP sessions per host, since I'm afraid this can easily be used
as a DOS attack on my proftpd servers.
Using MaxInstances/MaxClients does not seem to work, since those only look
at users/instances, after the user logs in.
Just opening the 3-way handshake starts a new instance, but is not
accounted for in those limits.


Can such a limit be controlled from proftpd process?





Best regards,

*Cosmin Neagu*

Network Architect

Phone +40.744.625.033



*Azets*

United Business Center 3,

Timisoara

www.azets.ro

_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html