Bugtraq mailing list archives
Re: 11 years of inetd default insecurity?
From: "Jonathan A. Zdziarski" <jonathan () nuclearelephant com>
Date: Tue, 09 Sep 2003 10:07:08 -0400
I wonder how difficult it would be to port the Apache DOS Evasive Maneuvers module to an inetd implementation. It does an excellent job of both fending off Dos/DDoS/Brute Force attacks and it also will talk to other tools on the network (Firewall, Router) to push the attack back to the borders. I would love a stab at doing this, but does anyone know where the original inetd source tree could be found? You could theoretically do this to the wrappers instead, but with consequences...so it makes more sense to code it right into the inetd listener. For reference the Apache DOS Evasive Maneuvers Module can be found at http://www.nuclearelephant.com/projects/dosevasive/ The advantage to doing it this way is that nothing goes into 'queue' mode, and nothing shuts down...you're cutting off the flooding host (or hosts) and nobody else. It would be all too easy to detect an inetd flood.
Current thread:
- 11 years of inetd default insecurity? 3APA3A (Sep 06)
- Re: 11 years of inetd default insecurity? Thamer Al-Harbash (Sep 08)
- Re: 11 years of inetd default insecurity? Dan Stromberg (Sep 08)
- Re: 11 years of inetd default insecurity? Andres Kroonmaa (Sep 10)
- Re: 11 years of inetd default insecurity? Dan Stromberg (Sep 08)
- Re: 11 years of inetd default insecurity? Dagmar d'Surreal (Sep 08)
- Re: 11 years of inetd default insecurity? Mike Hoskins (Sep 09)
- Re: 11 years of inetd default insecurity? Mike Tancsa (Sep 08)
- Re: 11 years of inetd default insecurity? Jonathan A. Zdziarski (Sep 10)
- Re: 11 years of inetd default insecurity? Greg A. Woods (Sep 10)
- Re: 11 years of inetd default insecurity? Jonathan A. Zdziarski (Sep 10)
- Re: 11 years of inetd default insecurity? Dan Harkless (Sep 09)
- Re: 11 years of inetd default insecurity? Darren Pilgrim (Sep 09)
- <Possible follow-ups>
- Re: 11 years of inetd default insecurity? Paul Szabo (Sep 08)
- Re[2]: 11 years of inetd default insecurity? 3APA3A (Sep 08)
- Re: 11 years of inetd default insecurity? Lucas Holt (Sep 08)
- Re: Re[2]: 11 years of inetd default insecurity? Paul Szabo (Sep 08)
- Re[4]: 11 years of inetd default insecurity? 3APA3A (Sep 08)
- RE: 11 years of inetd default insecurity? bjornar.bjorgum.larsen (Sep 09)
- Re: 11 years of inetd default insecurity? Thamer Al-Harbash (Sep 08)