Home › Forums › Archives › Computer Support › Online Status Indicator › Host down due to flooding
- This topic has 12 replies, 5 voices, and was last updated 21 years, 4 months ago by jfisher2.
-
AuthorPosts
-
January 3, 2003 at 10:47 pm #7592Jeff HesterKeymaster
My host @ catweazel.darktech.org:9000 is down. Some assh*le thinks it is funny to flood me off by registering his msn address 10 times per minute or more. So until there is some form of flood-protection in OSI i will not host it.
My thoughts about flood protection:
If someone from a certain IP requests the same URL more than X times in Y seconds, disregard the request and close the connection.January 3, 2003 at 11:08 pm #65358joshuaMemberwhat is the reaction of OSI ? CPU Load ?
And if the guy use some a random proxy for each request ?
January 4, 2003 at 12:44 am #65355Jeff HesterKeymasterQuote:quote:Originally posted by joshuawhat is the reaction of OSI ? CPU Load ?
Quote:quote:
CPU load also, bot the most annoying was that other requests simply weren’t handled.And if the guy use some a random proxy for each request ?
That would be nasty 🙂
January 4, 2003 at 11:35 am #65361GeoffreyMemberQuote:quote:Originally posted by Dennis_KMy host @ catweazel.darktech.org:9000 is down. Some assh*le thinks it is funny to flood me off by registering his msn address 10 times per minute or more.
You should mail the person that has lots of requests, maybe his address is on a really busy website or something like that. You connection (even if its on low bandwidth) should be able to handle it all due to the build in cache in osi.
Quote:quote:My thoughts about flood protection:
If someone from a certain IP requests the same URL more than X times in Y seconds, disregard the request and close the connection.I have some accounts on my service(s) that have more then 10 requests a second due to busy sites.
You should monitor it for a few min to see what is really going on, and if you are able to do a ‘backtrace’ (packet filter etc..) you should be able to find out where te request(s) come from.
January 4, 2003 at 1:03 pm #65354Jeff HesterKeymasterQuote:quote:Originally posted by GeoffreyQuote:quote:Originally posted by Dennis_KMy host @ catweazel.darktech.org:9000 is down. Some assh*le thinks it is funny to flood me off by registering his msn address 10 times per minute or more.
You should mail the person that has lots of requests, maybe his address is on a really busy website or something like that. You connection (even if its on low bandwidth) should be able to handle it all due to the build in cache in osi.
He tries to register…
And i know where it comes from, but he has a dynamic IP, so nothing can be done against it.If your host is so busy, what is the size of the logfile for a single day?
January 4, 2003 at 1:09 pm #65360GeoffreyMemberHe doesn`t ‘register’, people are requesting the status of that person (that`s why there are lots of dynamic ip`s in your log). The status account is just on a busy site.
Normally i have the log file disabled, otherwise about 10/15 MB a day.
January 4, 2003 at 1:10 pm #65357TonyMemberQuote:quote:Originally posted by Dennis_K
If your host is so busy, what is the size of the logfile for a single day?If you want smaller logs, run OSI in minilog or nolog mode.
January 4, 2003 at 1:14 pm #65353Jeff HesterKeymasterQuote:quote:Originally posted by GeoffreyHe doesn`t ‘register’, people are requesting the status of that person (that`s why there are lots of dynamic ip`s in your log). The status account is just on a busy site.
If the logs say he tries to register, he tries to register…
Quote:quote:
Normally i have the log file disabled, otherwise on a “minilog” mode about 10/15 MB a day.Logsize here was almost 300 MB/day
January 4, 2003 at 1:21 pm #65359GeoffreyMemberCould you post a small part of the log here ? (10/20 lines)
January 4, 2003 at 2:10 pm #65352Jeff HesterKeymasterQuote:quote:Originally posted by GeoffreyCould you post a small part of the log here ? (10/20 lines)
No i have deleted them (300 megs a day is a lot of space…)
January 4, 2003 at 2:28 pm #65356TonyMemberDennis, did he register with custom icons each time? Version 4.6 (currently in beta) should work much better in this case…
January 4, 2003 at 3:25 pm #65351Jeff HesterKeymasterYes he did…
At this moment i am running my host only for a private group and through my php frontend with some sort of flood protection. So maybe my host will be back up soon (through php that is)January 5, 2003 at 2:52 am #65362jfisher2Memberxinetd has flood protection (http://www.xinetd.org). It is what I have running on status.fishermotorsport.com.
-
AuthorPosts
- You must be logged in to reply to this topic.