Re: blocking unwanted traffic from hitting gateway

2011-05-21 Thread Rogelio
For what it's worth, here are some things I did to cut down on broadcast traffic until I figure out the other pieces --Putting router in between subscribers and gateway (handles thousands of ARP requests every minute much better than Linux) --DCHP relay on one of the northbound interface of the ne

Re: blocking unwanted traffic from hitting gateway

2011-05-18 Thread Wil Schultz
On May 18, 2011, at 5:42 AM, Rogelio wrote: > I've got about 1000 people hammering a Linux gateway with http > requests, but only about 150 of them are authenticated users for the > ISP. > > Once someone authenticates, then I want their traffic to pass through > okay. But if they're not an authe

Re: blocking unwanted traffic from hitting gateway

2011-05-18 Thread Matthew Palmer
On Wed, May 18, 2011 at 09:42:03AM -0300, Rogelio wrote: > I've got about 1000 people hammering a Linux gateway with http > requests, but only about 150 of them are authenticated users for the > ISP. Are you the ISP, or someone else? Why is the gateway caring that the requests are HTTP? Is it al

Re: blocking unwanted traffic from hitting gateway

2011-05-18 Thread Dobbins, Roland
On May 18, 2011, at 7:42 PM, Rogelio wrote: > This solution would need to be tied into the authentication services so > authenticated users hit the gateway. So the attackers can just hammer the authentication subsystem and take it down, instead? ;> By going the 'authentication' route in the