Re: Possible DoS against inetd in Solaris

[Vitaly McLain <twistah () DATASURGE NET>]

I could be wrong but I think this is how it's supposed to behave. A feature
of inetd is that it will stop attacks like octopus.c which attempt to flood
a daemon with sockets, thus consuming its resources. When inetd decides a
'socket flood' is taking place, it will block hosts from connecting for a
specified ammount of time. Check your logs: inetd /should/ have logged
something about it refusing further connections.

Vitaly McLain
twistah () datasurge net
twistah @ OPN & EfNet
"If you don't turn on to politics, politics will turn on you."
       - Ralph Nader