I almost managed to achieve my goal with inetd on freebsd. It has all the needed restrictions with this line
pop3 stream tcp nowait/200/5/5 root /var/qmail/bin/qmail-popup qmail-popup xxx.xxx.xxx /var/qmail/bin/auth_pop /var/qmail/bin/qmail-pop3d ./Maildir/
This limits to 200 simultaneous connections, 5 connects per minute per ip, and 5 simultaneous connects per ip.
My only problem is now that i cannot yet log from inetd.
TomP
Syed Qutubuddin Ahmad wrote:
On Fri, 2003-12-12 at 16:38, Pakolicz Tamas wrote:
Hi all!
How can I limit the number of simultaneous connections from an IP address with tcpserver to avoid being DoSed by a single POP3 user? I can do it on freebsd with inetd, but don't seem to find this functionality in tcpserver.
Me too :(. Can't find it in tcpserver. I have implemented this functionality in courier. What imap/pop3 server you are using?. In courier, rc file imapd/pop3d has this option. You can define no. of concurrent connection from single IP.
Regards, Qutub.
TomP
