PF+ALTQ as Anti-DoS?

[Vlad GALU]

On 7/13/06, Florent Thiery <Florent.Thiery at int-evry.fr> wrote:
> Hi,
>
> I'm having trouble finding information related to the use of altq as DoS
> mitigation technique... Do you have any interesting pointers ?

   If you have enough memory, synproxy + max-src-states + max-src-conn
is a great triplet.

>
> Thanks in advance
>
> Regards
>
> FLorent Thiery
>
>
> _______________________________________________
> freebsd-pf at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-pf
> To unsubscribe, send any mail to "freebsd-pf-unsubscribe at freebsd.org"
>


-- 
If it's there, and you can see it, it's real.
If it's not there, and you can see it, it's virtual.
If it's there, and you can't see it, it's transparent.
If it's not there, and you can't see it, you erased it.