Re: how to fight concurrent connection DOS attack to FreeBSD ftpd?

2007-11-24 Thread Bill Moran
Zhang Weiwu [EMAIL PROTECTED] wrote: The behaviour is like this: after '#/etc/rc.d/ftpd start', the number of ftpd process goes to several thousands. ps told me they are all accessed from the same user. I read the manual and found ftpd.conf(5) says /etc/ftpd.conf is the configuration file

Re: how to fight concurrent connection DOS attack to FreeBSD ftpd?

2007-11-24 Thread JD Bronson
At 10:34 PM 11/24/2007 +0800, Zhang Weiwu wrote: Dear all I run a ftp site which is being attacked by someone who issue some 1000 concurrent connection for downloading as anonymous. How can I fight back? how about controlling access via pf? you can limit the number of connections from the

Re: how to fight concurrent connection DOS attack to FreeBSD ftpd?

2007-11-24 Thread Quan Qiu
On Nov 24, 2007 10:34 PM, Zhang Weiwu [EMAIL PROTECTED] wrote: I run a ftp site which is being attacked by someone who issue some 1000 concurrent connection for downloading as anonymous. How can I fight back? If ftpd.conf is not the right manual page to read, can you suggest which

[SOLVED] Re: how to fight concurrent connection DOS attack to FreeBSD ftpd?

2007-11-24 Thread Zhang Weiwu
Thank you very much for everyone helped me. As a summary: 1. Bill Moran pointed out the mistake in ftpd.conf which should refer to lukemftpd (but referred to ftpd); He also suggested using lukemftpd in place of ftpd, but my ftpd is patched by myself and I prefer not to patch