Re: per_source on redhat 7.2

Steve G writes:
 > >If per_source was working, why is there 26 simultaneous 
 > >connections from the same IP address?
 > 
 > It looks like they were refused, not granted access. I just
 > tested it on my setup and it rejects connections fine. The
 > again, I run the latest cvs copy, too. I don't know of any
 > bug fixes that may affect per_source.
 > 
 > My test was to setup echo service with per_source = 2, I
 > opened 3 connections. Third one was blocked. I ended one
 > connection tried same connection it works.


Steve,

Is it possible that xinetd is getting hit by so many connections at
the same time that it lets through more than the per_source value?

I enabled some additional xinetd logging (authpriv.info in
syslog.conf) and set per_source to 5.   In wu-ftp's ftpaccess I also
have the host-limit set to 5.

Although I see several instances of per_source being logged, I also
see several instances of wu-ftp complaining about the host-limit being
exceeded - ie - xinetd has let more than 5 connections through from
the IP but wu-ftp refuses to take them.

I realize these connections are being blocked in the long run, but
thought that per_source should keep them from getting to wu-ftp all
together.


-- 
Cordially,

				          George Law 
____________________________________________________________________
Systems Engineer                      Software Workshop Inc.
[email protected] 315.635-1968 (x-213)     "software that fits!" (TM)





Jul  2 05:49:46 xxx ftpd[9740]: FTP LOGIN REFUSED (access denied) FROM 195.116.90.66 [195.116.90.66], anonymous
Jul  2 05:49:47 xxx ftpd[9742]: ACCESS DENIED (host limit 5; class remote) TO 195.116.90.66 [195.116.90.66]
Jul  2 05:49:47 xxx ftpd[9742]: FTP LOGIN REFUSED (access denied) FROM 195.116.90.66 [195.116.90.66], anonymous
Jul  2 05:49:50 xxx ftpd[9743]: ACCESS DENIED (host limit 5; class remote) TO 195.116.90.66 [195.116.90.66]
Jul  2 05:49:50 xxx ftpd[9743]: FTP LOGIN REFUSED (access denied) FROM 195.116.90.66 [195.116.90.66], anonymous
Jul  2 05:49:50 xxx ftpd[9744]: ACCESS DENIED (host limit 5; class remote) TO 195.116.90.66 [195.116.90.66]
Jul  2 05:49:50 xxx ftpd[9744]: FTP LOGIN REFUSED (access denied) FROM 195.116.90.66 [195.116.90.66], anonymous




Jul  2 05:41:34 xxx xinetd[8118]: FAIL: ftp per_source_limit from=195.116.90.66
Jul  2 05:43:38 xxx xinetd[8118]: FAIL: ftp per_source_limit from=195.116.90.66
Jul  2 05:50:19 xxx xinetd[8118]: FAIL: ftp per_source_limit from=195.116.90.66