On 2/22/12 12:39 AM, Roger S. wrote:
On Tue, Feb 21, 2012 at 9:51 PM, Joachim Schipper
<joac...@joachimschipper.nl> wrote:
Just the most obvious idea, since you mention that this sort-of-works if
you put "block drop in quick from !<whitelisted_users>": does it handle
this load if you turn off pf, or only include one or two trivial rules?
Hi,
I don't know nothing about nothing but someone once said as I was
struggling with a Snort and country block setup, "why don't you put them
on different machines?" As I am sure you have thought about this, can
you reduce the volume of attacks with a different machine so your pf
machine can handle the rest?
Mehma
