Good! Blacklist is an efficient way to avoid network packet from
untrusted peers. But In telecom region, usually all devides are shield
from the public network. For instance,  firewall can block those network
packet from hackers. :)

But in case of a new server for public usage, I can consider blacklist
solution.

Anyway, Thanks for your suggestion again.

BR
anderson

-----Original Message-----
From: Julien Vermillard [mailto:[EMAIL PROTECTED] 
Sent: Thursday, July 24, 2008 3:40 PM
To: [email protected]
Subject: Re: How to continue in case of suspicious network packet

* PGP Signed by an unknown key

On Thu, 24 Jul 2008 15:33:51 +0800
Oscar <[EMAIL PROTECTED]> wrote:

> Does 'suspicious network packet' mean the packets which is hacked?
> If yes, I don't think you need recovery or ignoration, you just 
> disconnect the channel.
> 
> Cheers,
> -Oscar
> 
> 
> 
> 
> 
> On Thu, Jul 24, 2008 at 3:03 PM, Wenrui Guo <[EMAIL PROTECTED]>
> wrote:
> 
> > Hi, all
> >
> > I'm going to make my mina program can recovery from the case where 
> > acceptor or connector receives suspicious network packet? Who can 
> > give me suggestions?
> > I intend to write some protection code thus server can continue to 
> > work rather than crashed or loop forever.
> >
> > BR
> > anderson
> >

Hi,
I use the same policy, when something is wrong in the data flow, my
ProtocolDecoder, send an exception and in the IoHandler.exceptionCaugth
I close the session.

what you need to add is temporary blacklisting of IP producing too much
exception.

Julien

* Unknown Key
* 0x6D4895C5

Reply via email to