Re: Fighting DDOS attacks with pf

2012-08-20 Thread Victor Detoni
David, Have you looked *optimization* at link below? Maybe it helps you. http://www.openbsd.org/faq/pf/options.html On Mon, Aug 20, 2012 at 12:53 PM, J David wrote: > Hello, > > We experience frequent DDOS attacks, and we're having a tough time > mitigating them with pf. We have plenty of ban

synproxy with sloppy enabled

2012-05-12 Thread Victor Detoni
hi, I would like to open a discuss about synproxy using sloppy, because I've been testing pf performance and I cannot reach a lot of traffic, because assymetric routing we can reach more performance. Why synproxy can not run with sloppy? Would have serious security problems? Some needs checks coul