Karlnet
[Top] [All Lists]

Re: [Karlnet] Syn packets causing lock ups,... a novel by KSM.

To: "Karlnet Mailing List" <karlnet@WISPNotes.com>
Subject: Re: [Karlnet] Syn packets causing lock ups,... a novel by KSM.
From: "Caleb Carroll" <karlnet@pathcom.ca>
Reply-to: Karlnet Mailing List <karlnet@WISPNotes.com>
Date: Wed, 17 Dec 2003 19:22:12 -0700
List-post: <mailto:karlnet@WISPNotes.com>
>handle, and it makes the unit practically unreachable to remove the MAC
>of the unfortunate victim.  I have a decent system for response and
>triage, but have been curious as to what else can be done.

You might also just disable their ethernet port?

>tendency to bring negative feelings towards my company as an ISP when
>the network has these moments, and I don't like having to call customers
>and deny them service due to what is a common problem in today's world.

Well, you've got to do what's going to be good for the majority.

>1. Instill some kind of pre network virus software.  We do not at the
>moment simply due to the overhead our gateway deals with for what it's
>responsibilities are, and I am in the process of redesigning and
>improving the set-up.  It is directly proportional to how fast my Linux
>skills are improving. :) (including instilling Cacti to monitor my
>links, as it has Karlnet SNMP and MIBs built in!)

A SBC Linux bridge/router will at least allow you to rate limit unwanted 
traffic.  Karlnet is good for filtering out unwanted traffic but it doesn't 
allow any packet rate limiting.



_______________________________________________
Karlnet mailing list
Karlnet@WISPNotes.com
http://lists.wispnotes.com/mailman/listinfo/karlnet

<Prev in Thread] Current Thread [Next in Thread>