dev-serveez
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[dev-serveez] access list


From: stefan
Subject: [dev-serveez] access list
Date: Wed, 9 May 2001 23:13:56 +0200 (CEST)

Hello,
  just committed some lines referring access lists and connection
frequency (hammer protection). Both the access lists DENY and ALLOW are
svz_array_t's containing ip addresses in dotted decimal form. If you
specify a deny list, every ip is allowed except those in the list. If you
specify an allow list all ip addresses are rejected except those in the
list. And finally if you specify both list every only ip addresses in the
allow list can connect which are not part of the deny list.

  The connect frequency is given in connects per ip and seconds. I just
keep track of the ip addresses of the last some seconds and calculate an
average frequency over this time. If an ip exceeds a certain limit it gets
rejected.

  Both features wait to be enabled via port configuration specified in a
guile script.

Cheers,
        address@hidden




reply via email to

[Prev in Thread] Current Thread [Next in Thread]