PF+ALTQ as Anti-DoS?

Hi,

I'm having trouble finding information related to the use
of altq as DoS 
mitigation technique... Do you have any interesting pointers
?

Thanks in advance

Regards

FLorent Thiery


_______________________________________________
freebsd-pffreebsd.org mailing list

http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to
"freebsd-pf-unsubscribefreebsd.org"

On 7/13/06, Florent Thiery <Florent.Thieryint-evry.fr> wrote:
> Hi,
>
> I'm having trouble finding information related to the
use of altq as DoS
> mitigation technique... Do you have any interesting
pointers ?

   If you have enough memory, synproxy + max-src-states +
max-src-conn
is a great triplet.

>
> Thanks in advance
>
> Regards
>
> FLorent Thiery
>
>
> _______________________________________________
> freebsd-pffreebsd.org mailing list
> 
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
> To unsubscribe, send any mail to
"freebsd-pf-unsubscribefreebsd.org"
>


-- 
If it's there, and you can see it, it's real.
If it's not there, and you can see it, it's virtual.
If it's there, and you can't see it, it's transparent.
If it's not there, and you can't see it, you erased it.
_______________________________________________
freebsd-pffreebsd.org mailing list

http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to
"freebsd-pf-unsubscribefreebsd.org"