看板FB_security
标 题Re: rate limiting sshd connections ?
发信站NCTU CSIE FreeBSD Server (Tue May 11 20:24:52 2004)
转信站ptt!FreeBSD.csie.NCTU!not-for-mail
On 11 mai 2004, at 22:27, Roger Marquis wrote:
> "slimmy baddog" wrote:
>> I would strognly suggest that you dont use inetd for running services
>> but
>> running all your services as daemons wich is much faster for the
>> system
>> and safer.
>
> That used to be the recommendation, back when 50MHz CPUs were the
> norm. With 1 GHz and faster CPUs the difference between sshd and
> inetd starting a child sshd is in the millisecond range i.e, impossible
> to distinguish by look and feel.
in fact, I've seen an Apple XServe (two G4 1GHz processors) running
MacOS
X Server beeing DOSed by a remote Nagios probe testing it's sshd once
per
minute. On OSX, sshd runs from xinetd. The box used to need hard reboot
once
a day until the problem was identified and the nagios probe was
disabled.
my 2 cents.
patpro
--
je cherche un poste d'admin-sys Mac/UNIX
(ou une jeune et jolie femme riche)
http://patpro.net/cv.php
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "
[email protected]"