[CentOS-mirror] DOS attack downloading DVD isos

Wed Nov 25 23:10:47 UTC 2009
Pär Andersson <paran at nsc.liu.se>

Mogens Kjaer <mk at crc.dk> writes:
> 
> Redirecting http requests to ftp solved the problem:

Is this really ok on a CentOS mirror? In the mirror list it says that
you support HTTP but with this config that is not true for ISOs.

For most people this probably makes no difference, but there are
networks where stupid NAT and/or firewalls lets you access HTTP but not
FTP.

I limit the amount of connections/IP to 2 for the ISOs instead, this
seems to work quite ok against download accelerators.

--
Pär Andersson
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 196 bytes
Desc: not available
URL: <http://lists.centos.org/pipermail/centos-mirror/attachments/20091126/ae928a51/attachment-0004.sig>