[CentOS-mirror] DOS attack downloading DVD isos

Nick Olsen

Nick at 141networks.com
Wed Nov 25 23:19:18 UTC 2009


A lot of mirrors do this anyways. ISO's are big files, HTTP wasn't made 
to move big files. Most people do this just so the user has a better 
chance of the download completing successfully.

On 11/25/2009 6:10 PM, Pär Andersson wrote:
> Mogens Kjaer<mk at crc.dk>  writes:
>    
>> Redirecting http requests to ftp solved the problem:
>>      
> Is this really ok on a CentOS mirror? In the mirror list it says that
> you support HTTP but with this config that is not true for ISOs.
>
> For most people this probably makes no difference, but there are
> networks where stupid NAT and/or firewalls lets you access HTTP but not
> FTP.
>
> I limit the amount of connections/IP to 2 for the ISOs instead, this
> seems to work quite ok against download accelerators.
>
> --
> Pär Andersson
>    
>
>
> _______________________________________________
> CentOS-mirror mailing list
> CentOS-mirror at centos.org
> http://lists.centos.org/mailman/listinfo/centos-mirror
>    
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.centos.org/pipermail/centos-mirror/attachments/20091125/57bdaa84/attachment-0002.html>


More information about the CentOS-mirror mailing list