[CentOS-mirror] DOS attack downloading DVD isos
Nick Olsen
Nick at 141networks.com
Wed Nov 25 23:19:18 UTC 2009
A lot of mirrors do this anyways. ISO's are big files, HTTP wasn't made
to move big files. Most people do this just so the user has a better
chance of the download completing successfully.
On 11/25/2009 6:10 PM, Pär Andersson wrote:
> Mogens Kjaer<mk at crc.dk> writes:
>
>> Redirecting http requests to ftp solved the problem:
>>
> Is this really ok on a CentOS mirror? In the mirror list it says that
> you support HTTP but with this config that is not true for ISOs.
>
> For most people this probably makes no difference, but there are
> networks where stupid NAT and/or firewalls lets you access HTTP but not
> FTP.
>
> I limit the amount of connections/IP to 2 for the ISOs instead, this
> seems to work quite ok against download accelerators.
>
> --
> Pär Andersson
>
>
>
> _______________________________________________
> CentOS-mirror mailing list
> CentOS-mirror at centos.org
> http://lists.centos.org/mailman/listinfo/centos-mirror
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.centos.org/pipermail/centos-mirror/attachments/20091125/57bdaa84/attachment.html
More information about the CentOS-mirror
mailing list