lkml.org 
[lkml]   [1999]   [Mar]   [8]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
Subject2.0.36: ip_masqurade and stealth scan DoS
Hi,

We have a problem with ip_masqurading set up as a firewall. When someone
runs a stealth scan from the masquraded net to the outside net, it will
very fast consume all available masqurade ports. The result is a nasty
DoS for all adresses on the masquraded net.

Is there any possibly limit on masqurade ports per source adress?
This would effectively stop the scan, and limit the DoS to the offender
only.

I guess this problem also affects 2.2 kernels as well.

Is there anyone else that has been hit by this problem?


Best Regards

Daniel Ryde, System Administrator
__________________________________________________________________________
Tripnet AB Visit Address: Telephone: +46 31 7252500
Box 5071 Avagen 42 Facsimile: +46 31 7252501
S-402 22 GOTEBORG GOTEBORG Email: ryde@tripnet.se
Sweden Sweden

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:50    [from the cache]
©2003-2011 Jasper Spaans