Re: [Server-devel] Question on number of iptables rules

2011-02-02 Thread Martin Langhoff
On Tue, Feb 1, 2011 at 6:28 PM, Anna ascho...@gmail.com wrote: My test XS at home has a FQDN and is open to the outside.  Therefore this is probably a pretty rare issue in XS land, but I thought I'd ask. In general, I'd keep it closed. It's not designed as a full internet server. Getting them

Re: [Server-devel] Question on number of iptables rules

2011-02-02 Thread Jerry Vonau
On Wed, 2011-02-02 at 08:24 -0700, Martin Langhoff wrote: On Tue, Feb 1, 2011 at 6:28 PM, Anna ascho...@gmail.com wrote: My test XS at home has a FQDN and is open to the outside. Therefore this is probably a pretty rare issue in XS land, but I thought I'd ask. In general, I'd keep it

Re: [Server-devel] Question on number of iptables rules

2011-02-02 Thread Anna
On Wed, Feb 2, 2011 at 9:24 AM, Martin Langhoff martin.langh...@gmail.comwrote: On Tue, Feb 1, 2011 at 6:28 PM, Anna ascho...@gmail.com wrote: My test XS at home has a FQDN and is open to the outside. Therefore this is probably a pretty rare issue in XS land, but I thought I'd ask. In

[Server-devel] Question on number of iptables rules

2011-02-01 Thread Anna
My test XS at home has a FQDN and is open to the outside. Therefore this is probably a pretty rare issue in XS land, but I thought I'd ask. I noticed my ambient rx/tx traffic on eth0 had gone from really low (like 0.1 to 0.7 kB/s) to hovering between 5-20 kB/s. I went through httpd's access_log

Re: [Server-devel] Question on number of iptables rules

2011-02-01 Thread Tom Mitchell
On Tue, Feb 1, 2011 at 5:28 PM, Anna ascho...@gmail.com wrote: My test XS at home has a FQDN and is open to the outside.  Therefore this is probably a pretty rare issue in XS land, but I thought I'd ask. I noticed my ambient rx/tx traffic on eth0 had gone from really low (like 0.1 to 0.7

Re: [Server-devel] Question on number of iptables rules

2011-02-01 Thread Anna
On Tue, Feb 1, 2011 at 8:46 PM, Tom Mitchell mi...@niftyegg.com wrote: It can help to block China and Russia but the way spam and denial of service botnets work that is more limited than you might wish. Well, I'm not currently running a mail server, so luckily I don't have to worry about that