61 reputation
3
bio website
location France
age 36
visits member for 5 years, 1 month
seen Aug 21 '10 at 6:48

May
11
awarded  Popular Question
Feb
11
comment Monitoring traffic on linux router for syn-flood
You don't understand, we already read manpages, books on netfilter. We already use --limit, --limit-burst. We write some rules like this: iptables -A connlimit -s XXX.XXX.$a.0/24 -m hashlimit --hashlimit-above 4000/minute --hashlimit-mode srcip --hashlimit-burst 100 --hashlimit-htable-size 500 --hashlimit-htable-max 500 --hashlimit-name TOUT-$a -j drophash (and it's already working.) But, what we need to adjust is the hashlimit-above, and we need to estimate the value for big network connection. How can we monitor the number of connection require by some network?
Feb
10
comment Monitoring traffic on linux router for syn-flood
Sorry, it's a router, not a final server. We use FORWARD rules. It's for thousand of client, we can't limit with 10/s, it's hashlimit by source and with limit +4000/minute connection by ip. But for some big network a limit of 10000/minute is easy to up.
Feb
10
awarded  Student
Feb
10
asked Monitoring traffic on linux router for syn-flood
Nov
6
answered Managing upgrades on hundreds of Debian servers
Oct
9
awarded  Teacher
Oct
9
answered apt-get not working on my Ubuntu Desktop 9.04 jaunty since this morning
Aug
3
answered Good linux firewall?
Jul
24
answered Installing debian without a cd/dvd-rom