[tpop3d-discuss] Maximal connections per minute option

Chris Lightfoot chris at ex-parrot.com
Fri, 11 Oct 2002 20:02:52 +0100


On Fri, Sep 27, 2002 at 09:24:38PM +0100, Chris Elsworth wrote:
> Hi,
> 
> I was just wondering if anyone had written a patch for tpop3d to add a
> command-line/configuration file option to set a maximal connections
> per minute that would be accepted (both globally and from any one IP).
> Primary use of this would be to stop DoS attacks by way of someone
> very quickly and repeatedly connecting and disconnecting, causing a
> lot of forking. Implementing the check pre-fork would remove a lot of
> CPU load in this case.
> 
> If nobody has written one, I'll have a go myself, I think. Any chance
> something like this could be included in the tree if it were done
> right Chris?

Sorry about the delay in replying to this. I've been
largely away from email for a bit. This seems like a
reasonable enhancement, though it's a pity there's no
standard way to do this (e.g., something like TCP
wrappers).

-- 
``We will also be working with the victims and perpetrators of crime...''
  (Labour party campaign leaflet)