Connection rate limiting

[w1nn3r]

Hello,

How would i go about rate limiting the amount of connections/sec my server would take before it would stop allowing inet requests on that port/service. I've been getting hammered on my ident service and Most of the time its 300 requests within a 10 minute period. This could be a shell script, c program, log parser...just really need to head this off before it becomes a real problem.

 

[MrTom]

best thing is just to remove ident.

alternatively iptables would let you do this. having a rule like

iptables -A INPUT -p TCP --syn -dport auth -m limit --limit 10/second -j ACCEPT

if you are getting these ident requests from the internet then build a proper firewall and just block the port permanently.