Re: [luca.ercoli@inwind.it: DoS against mysqld]

From: bda (bda@mirrorshades.net)
Date: 08/23/02 

Date: Fri, 23 Aug 2002 12:14:18 -0400
From: bda <bda@mirrorshades.net>
To: Simone Piunno <pioppo@ferrara.linux.it>

On Fri, Aug 23, 2002 at 06:10:57PM +0200, Simone Piunno wrote:

> luca.ercoli@inwind.it wrote:
>
> Sorry but this is not a DoS against mysqld,
> this is a DoS against yourself!
>
> Only connections coming from the offending IP address are blocked,
> and I can't see anything wrong in this.

If you're running a shell service of any sort, it's possible that a
local user could "DoS" the MySQL server, and interrupt service for
everyone else.

Of course, that user would then be removed, but it's still a hassle. :-)

However, I agree that blocking the address is the correct behavior. Does
MySQL have a configuration option with which to extempt specific hosts
from being ignored? 

-- 
bda
...
she.never.really.belonged.to.me
http://mirrorshades.org