Re: Denial of service process table attacks

[Frank DENIS]

Russ Allbery wrote: 
> >> Correct. As long as you run all of your services via tcpserver.
> > Too bad similar protection isn't currently available for udp and RPC
> > services :-)
> 
> Most UDP services run from inetd run with the "wait" option, which means
> that as long as new requests are coming in, the one forked daemon handles
> them all.

  Right, and for per-host ratios, try IPLimit, available from
http://www.jedi.claranet.fr

  -Frank.