Re: What is this Very Stupid DOS Attack Script?

From: Michael Carlson (carlson39_at_llnl.gov)
Date: 04/08/05

  • Next message: Chris: "Re: What is this Very Stupid DOS Attack Script?"
    Date: Fri, 08 Apr 2005 12:07:11 -0700
    To: freebsd-security@freebsd.org
    
    

    I would be very interested in a script/setup like this, so I second the
    suggestion of posting it somewhere.

    On a minor off topic question, has anyone gotten the linux-pam/pam_tally to
    work in 5.x?

    Due to security requirements at work I need either that or something similar.

    At 05:28 PM 4/7/2005, Jon Adams wrote:

    >Marian Hettwer wrote:
    >
    >>On Mi, 6.04.2005, 17:57, Willem Jan Withagen sagte:
    >>
    >>
    >>>I've build some swatch-rules that after two of these hits, I dump
    >>>the host into ifpw-deny space.
    >>>
    >>>
    >>Aye. I thought about writing a script, doing the same like yours, too.
    >>Could you post this script somewhere, so that I could add some
    >>functionality or just use it ?
    >>
    >>
    >This is similar to what I do... except
    >
    >I just run a cronjob every so often... daily.. weekly.. what have you..
    >that will restart ipfw... probably there is a cleaner solution, but it
    >does the job for me.... as far as cleaning out the dozens of IPs that get
    >blocked for connecting to ports they shouldnt on my boxes
    >
    >_______________________________________________
    >freebsd-security@freebsd.org mailing list
    >http://lists.freebsd.org/mailman/listinfo/freebsd-security
    >To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"

    _______________________________________________
    freebsd-security@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-security
    To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"


  • Next message: Chris: "Re: What is this Very Stupid DOS Attack Script?"

    Relevant Pages

    • Re: [opensuse] Cron Job Problem
      ... My apologies for posting the same problem twice. ... using FPN after I try your second suggestion. ... The script should run tonight. ... The variable only tells cron to report ...
      (SuSE)
    • Re: Javascript in an HTML table
      ... [previous posting superseded in the face of new evidence] ... This just displays my graph by itself. ... The <script ...> tag that was in the original code is missing here. ... Prototype.js was written by people who don't know javascript for people who ...
      (comp.lang.javascript)
    • Re: Setting registry data
      ... Manbinder Pal Singh ... This posting is provided "AS IS" with no warranties, ... I tried in google, but i was able to get codes in script format, not in ... this example shows how to read values from the registry but ...
      (microsoft.public.win32.programmer.wmi)
    • Re: Metabase restore - how to tell if there is corruption?
      ... As your servers are clustering, you can synchronize the two metabases ... between the nodes using the following script: ... This posting is provided "AS IS" with no warranties, ...
      (microsoft.public.exchange.admin)
    • Re: Script in GPO
      ... any questions should be posted in the NewsGroup ... This posting is provided "AS IS" with no warranties, ... I changed the script back to match it, we would then have the same issue ...
      (microsoft.public.win2000.active_directory)