Bugtraq mailing list archives
Re: 11 years of inetd default insecurity?
From: "Greg A. Woods" <woods () weird com>
Date: Wed, 10 Sep 2003 14:47:13 -0400 (EDT)
[ On Tuesday, September 9, 2003 at 10:07:08 (-0400), Jonathan A. Zdziarski wrote: ]
Subject: Re: 11 years of inetd default insecurity? I would love a stab at doing this, but does anyone know where the original inetd source tree could be found?
You don't want to start with the "original". Really. You could start with my version. I've integrated the best features of FreeBSD and OpenBSD into one derived the NetBSD version. See NetBSD's PR#18955. Let me know if you want the very latest source from my local 1.6.x-STABLE tree (I should append it to the PR soon though). http://www.netbsd.org/cgi-bin/query-pr-single.pl?number=18955
For reference the Apache DOS Evasive Maneuvers Module can be found at http://www.nuclearelephant.com/projects/dosevasive/ The advantage to doing it this way is that nothing goes into 'queue' mode, and nothing shuts down...you're cutting off the flooding host (or hosts) and nobody else.
I will certainly take a look at the mechanisms implemented for Apache. Thanks for posting this reference!
It would be all too easy to detect an inetd flood.
Fending off D.D.o.S. attacks that make normal service requests of public servers while still maintaining usable services is anything but easy. :-) -- Greg A. Woods +1 416 218-0098 VE3TCP RoboHack <woods () robohack ca> Planix, Inc. <woods () planix com> Secrets of the Weird <woods () weird com>
Current thread:
- 11 years of inetd default insecurity? 3APA3A (Sep 06)
- Re: 11 years of inetd default insecurity? Thamer Al-Harbash (Sep 08)
- Re: 11 years of inetd default insecurity? Dan Stromberg (Sep 08)
- Re: 11 years of inetd default insecurity? Andres Kroonmaa (Sep 10)
- Re: 11 years of inetd default insecurity? Dan Stromberg (Sep 08)
- Re: 11 years of inetd default insecurity? Dagmar d'Surreal (Sep 08)
- Re: 11 years of inetd default insecurity? Mike Hoskins (Sep 09)
- Re: 11 years of inetd default insecurity? Mike Tancsa (Sep 08)
- Re: 11 years of inetd default insecurity? Jonathan A. Zdziarski (Sep 10)
- Re: 11 years of inetd default insecurity? Greg A. Woods (Sep 10)
- Re: 11 years of inetd default insecurity? Jonathan A. Zdziarski (Sep 10)
- Re: 11 years of inetd default insecurity? Dan Harkless (Sep 09)
- Re: 11 years of inetd default insecurity? Darren Pilgrim (Sep 09)
- <Possible follow-ups>
- Re: 11 years of inetd default insecurity? Paul Szabo (Sep 08)
- Re[2]: 11 years of inetd default insecurity? 3APA3A (Sep 08)
- Re: 11 years of inetd default insecurity? Lucas Holt (Sep 08)
- Re: Re[2]: 11 years of inetd default insecurity? Paul Szabo (Sep 08)
- Re[4]: 11 years of inetd default insecurity? 3APA3A (Sep 08)
- RE: 11 years of inetd default insecurity? bjornar.bjorgum.larsen (Sep 09)
- Re: 11 years of inetd default insecurity? Thamer Al-Harbash (Sep 08)