Flood and Bandwith Protection

alex.cabana_at_cgocable.ca
Date: 03/14/05

  • Next message: Doug McIntyre: "Re: Windows XP Home Edition Administrator Access"
    Date: 14 Mar 2005 11:59:51 -0800
    
    

    Hi!

    I'm working for an ISP and I'm trying to find a solution to some real
    annoying flood problems. I have to control the traffic over a Gig-link
    (About 600mb/s). I tried with snort and it's nearly impossible.

    Specific Action required: Block the destination IP (Yeah, own customer)
    when he receive more than 3mb/s of traffic per minutes. Is there a
    snort rule that allow that.. or anything else somebody is aware of ?

    Here's a short draw of the network

    (provider) --- Gig link --- Cisco 7114 Router --- Cable Modem Users
                                       |
                                       |
                                  Snort Linux Box

    Any help or suggestion is appreciated


  • Next message: Doug McIntyre: "Re: Windows XP Home Edition Administrator Access"
  • Quantcast