Re: How to limit the number of sessions per IP address (DOS attacks)

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jose, On 10/11/12 3:36 PM, Jose María Zaragoza wrote: > I'd like to implement something for controlling flooding on the > same URL. > > I've thought to make it using by a valve filter ( based on > RemoteAddressFilter ) and check remote IP address.

Re: How to limit the number of sessions per IP address (DOS attacks)

I'd like to implement something for controlling flooding on the same URL. I've thought to make it using by a valve filter ( based on RemoteAddressFilter ) and check remote IP address. is it the best way ? is Remote IP address reliable ? I'll be a public Tomcat 6 server I could add a CAPTCHA but

Re: How to limit the number of sessions per IP address (DOS attacks)

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Brian, On 10/3/12 9:13 PM, Brian Braun wrote: > You are right, there is a hole there. However, it won't be a > problem for me. Basically, I want to detect if the same IP creates > so many sessions that in the same time 200 sessions exist and > belong

Re: How to limit the number of sessions per IP address (DOS attacks)

Hi Contantine, I barely have about 10-20 sessions existing at the same time, considering already abandones sessions and even sessions created because of crawlers. So it won't be slow to use the getCount() method, at least not for now. Thanks for your comment! On Mon, Oct 1, 2012 at 5:42 AM, Kon

Re: How to limit the number of sessions per IP address (DOS attacks)

HI André, You are right, there is a hole there. However, it won't be a problem for me. Basically, I want to detect if the same IP creates so many sessions that in the same time 200 sessions exist and belong to is (the sessions live about 30 min each). My site doesn't have much traffic, usually the

Re: How to limit the number of sessions per IP address (DOS attacks)

On 30 Sep 2012, at 06:44, Brian Braun wrote: > Hi, > > I'm using Tomcat 7.0.22 (+Ubuntu Linux + MySQL). > > I'm providen a geolocation service. My users invoque a URL in my server > (something like http://services.acme.com/locate?ip=..) providing the IP > address, and it responds with the geo

Re: How to limit the number of sessions per IP address (DOS attacks)

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Brian, On 10/1/12 1:08 AM, Brian Braun wrote: > 1- I had almost decided to program a filter. However, I have found > this solution: > http://stackoverflow.com/questions/3679465/find-number-of-active-sessions-created-from-a-given-client-ip/3679783#367

Re: How to limit the number of sessions per IP address (DOS attacks)

2012/10/1 Brian Braun : > Hi Constantine, > > 1- I had almost decided to program a filter. However, I have found this > solution: > http://stackoverflow.com/questions/3679465/find-number-of-active-sessions-created-from-a-given-client-ip/3679783#3679783 > What do you think about it? I havent tried i

Re: How to limit the number of sessions per IP address (DOS attacks)

Brian Braun wrote: Hi Constantine, 1- I had almost decided to program a filter. However, I have found this solution: http://stackoverflow.com/questions/3679465/find-number-of-active-sessions-created-from-a-given-client-ip/3679783#3679783 What do you think about it? I havent tried it yet, but as

Re: How to limit the number of sessions per IP address (DOS attacks)

Hi Constantine, 1- I had almost decided to program a filter. However, I have found this solution: http://stackoverflow.com/questions/3679465/find-number-of-active-sessions-created-from-a-given-client-ip/3679783#3679783 What do you think about it? I havent tried it yet, but as far as I can tell it

Re: How to limit the number of sessions per IP address (DOS attacks)

2012/9/30 Brian Braun : > Hi, > > I'm using Tomcat 7.0.22 (+Ubuntu Linux + MySQL). > > I'm providen a geolocation service. My users invoque a URL in my server > (something like http://services.acme.com/locate?ip=..) providing the IP > address, and it responds with the geolocation info. This ser