Re: [Server-devel] Question on number of iptables rules

2011-02-02 Thread Anna
On Wed, Feb 2, 2011 at 9:24 AM, Martin Langhoff wrote: > On Tue, Feb 1, 2011 at 6:28 PM, Anna wrote: > > My test XS at home has a FQDN and is open to the outside. Therefore this > is > > probably a pretty rare issue in XS land, but I thought I'd ask. > > In general, I'd keep it closed. It's not

Re: [Server-devel] Question on number of iptables rules

2011-02-02 Thread Jerry Vonau
On Wed, 2011-02-02 at 08:24 -0700, Martin Langhoff wrote: > On Tue, Feb 1, 2011 at 6:28 PM, Anna wrote: > > My test XS at home has a FQDN and is open to the outside. Therefore this is > > probably a pretty rare issue in XS land, but I thought I'd ask. > > In general, I'd keep it closed. It's not

Re: [Server-devel] Question on number of iptables rules

2011-02-02 Thread Martin Langhoff
On Tue, Feb 1, 2011 at 6:28 PM, Anna wrote: > My test XS at home has a FQDN and is open to the outside.  Therefore this is > probably a pretty rare issue in XS land, but I thought I'd ask. In general, I'd keep it closed. It's not designed as a full internet server. > Getting them into /etc/sysco

Re: [Server-devel] Question on number of iptables rules

2011-02-01 Thread Anna
On Tue, Feb 1, 2011 at 8:46 PM, Tom Mitchell wrote: > It can help to block China and Russia but the way spam and denial > of service botnets work that is more limited than you might wish. > Well, I'm not currently running a mail server, so luckily I don't have to worry about that right now. The

Re: [Server-devel] Question on number of iptables rules

2011-02-01 Thread Tom Mitchell
On Tue, Feb 1, 2011 at 5:28 PM, Anna wrote: > My test XS at home has a FQDN and is open to the outside.  Therefore this is > probably a pretty rare issue in XS land, but I thought I'd ask. > > I noticed my "ambient" rx/tx traffic on eth0 had gone from really low (like > 0.1 to 0.7 kB/s) to hoverin

[Server-devel] Question on number of iptables rules

2011-02-01 Thread Anna
My test XS at home has a FQDN and is open to the outside. Therefore this is probably a pretty rare issue in XS land, but I thought I'd ask. I noticed my "ambient" rx/tx traffic on eth0 had gone from really low (like 0.1 to 0.7 kB/s) to hovering between 5-20 kB/s. I went through httpd's access_lo