Raimo Niskanen wrote:
On Tue, Dec 11, 2007 at 01:15:11AM +1300, Joel Wiramu Pauling wrote:
Tip.
Don't allow password challenge. Problem solved. Just use key'd ssh and this
problem disappears.
Bin there, done that.
You answered the wrong question.
I think you got the right answer many times so far, but you just refuse
to take the advise. People have told you many times to just use pf and
be done with it.
You just reply and dismiss them like one here:
"I was adviced for pf, but right now a simple ssh-config and
hosts.allow/deny is serving me fine. I will learn and use pf in due course."
I want to know if and what I can do (on the server side) about HTTP
clients that put sockets on my httpd server in state CLOSE_WAIT and
thereby chew up all sockets for the server causing a kind of
denial of service state.
People have giving you the answer over and over, but it is up to you to
listen tot he advise.
And yes, I have googled for "HPPT server socket CLOSE_WAIT" and
did not get much wiser.
I am not sure you actually did, but I will give you the benefit here.
Again, the same answer and same advise. Get with it and use pf.
If you google it, you would have seen exactly the answer and example to
your question here yet again using pf:
http://openbsd.org/faq/pf/filter.html#synproxy
It one thing to ask for help and advise, users here have given you
plenty of really good one, it's an other to refuse it, dismiss it and
come back saving no one tell you the answer, or provide you answer to
the wrong question.
The answer to your problem is just to use PF, or may be the real problem
is between the monitor and the chair.
Please, just read on it and do it right and stop telling people are not
helping you. They are and they give you the right answer, but you refuse
them.
Your computer(s), your choice, that I get it, but then don't say you
don't get help.
Great FAQ on PF and it's easy to read:
Spend the same amount of time reading it as you write emails and you
will know it much better then I looks like.
http://openbsd.org/faq/pf/
If you want more then read great docs on it here:
http://www.bsdly.net/~peter/pf.html
and if that still not answering your questions, then get the book:
http://nostarch.com/frameset.php?startat=pf
So far ALL the answers to your various questions on the subject and the
variation of it is to use PF, so just do it.
Hope this help you some.
Best,
Daniel
