On Wed, 19 Dec 2007 09:55:41 +0100 (CET) "Marco Bonetti" <[EMAIL PROTECTED]> wrote: >On Wed, December 19, 2007 09:46, Scott Bennett wrote: >> we need to think up an automated way to deny directory service to >> abusers in order to put a stop to such activity. >you could try rate limiting the connections or adapting mine or perry's >script to your needs. > Well, you seem to be getting ahead of things here, which would have been more apparent if you hadn't deleted all the context. I would like to know first before worrying about automating a remedy whether anyone else is experiencing the same problem. If my tor server is the only one being attacked, then the problem may not rise to the necessity of an automated solution. If anyone else is seeing this problem, please let us know. Also, you didn't identify the scripts to which you refer clearly enough that I have any idea what they might be. What do they do? Where can they be found? Up till now, I've only added two filter rules on the router to block anything from the two offending /24 nets from getting into my LAN. Keeps the LAN traffic down, as well as the outbound link traffic. Very simple, no checking of protocol, port, or destination IP address required, etc. But it does require my presence to notice something fishy going on, check it out more carefully, and then add a filter rule.
Scott Bennett, Comm. ASMELG, CFIAG ********************************************************************** * Internet: bennett at cs.niu.edu * *--------------------------------------------------------------------* * "A well regulated and disciplined militia, is at all times a good * * objection to the introduction of that bane of all free governments * * -- a standing army." * * -- Gov. John Hancock, New York Journal, 28 January 1790 * **********************************************************************