Re: pf to block against DDoS?

2008-09-22 Thread Redd Vinylene
On Mon, Sep 22, 2008 at 10:36 AM, Lars Noodén <[EMAIL PROTECTED]>wrote: > Redd Vinylene wrote: > >> ... > >> You can also use two tables so that the first overload gets shunted to a > >> slow queue and given a second chance before ending up in the second > >> table which gets blocked. > > ... > >

Re: pf to block against DDoS?

2008-09-21 Thread Redd Vinylene
; > > But does anybody have any nice setups of this they'd want to share? > > > > > > > > > > From: Oliver Peter <[EMAIL PROTECTED]> > > > To: Redd Vinylene <[EMAIL PROTECTED]> > > > Cc: <[EMAIL PROTECTED]>, <[EMAIL PRO

Re: pf to block against DDoS?

2008-09-21 Thread Redd Vinylene
; > > But does anybody have any nice setups of this they'd want to share? > > > > > > > > > > From: Oliver Peter <[EMAIL PROTECTED]> > > > To: Redd Vinylene <[EMAIL PROTECTED]> > > > Cc: <[EMAIL PROTECTED]>, <[EMAIL PRO

Re: pf to block against DDoS?

2008-09-05 Thread Diego Schulz
On Fri, Sep 5, 2008 at 1:54 AM, Peter N. M. Hansteen <[EMAIL PROTECTED]>wrote: > Oliver Peter <[EMAIL PROTECTED]> writes: > > > I can recommend reading through this as well: > > > > http://www.bgnett.no/~peter/pf/en/bruteforce.html > > Thanks

Re: pf to block against DDoS?

2008-09-04 Thread Peter N. M. Hansteen
Oliver Peter <[EMAIL PROTECTED]> writes: > I can recommend reading through this as well: > http://www.bgnett.no/~peter/pf/en/bruteforce.html Thanks for recommending that! However I would generally recommend the maintained version which is up at , with the direct

Re: pf to block against DDoS?

2008-09-04 Thread Oliver Peter
On Thu, Sep 04, 2008 at 09:23:09PM +0200, Redd Vinylene wrote: > Hello hello! > > I was quite shocked today when I heard I could use pf to block against DDoS > attacks, using Stateful Tracking Options, > http://www.openbsd.org/faq/pf/filter.html#stateopts. > > But does anybody have any nice setup

Re: pf to block against DDoS?

2008-09-04 Thread Subhro
What exactly are you looking for? Are you looking for example rulesets? Thanks Subhro On 9/5/08, Redd Vinylene <[EMAIL PROTECTED]> wrote: > Hello hello! > > I was quite shocked today when I heard I could use pf to block against DDoS > attacks, using Stateful Tracking Options, > http://www.openb