standalone-nnrpd "dies" when hitting ressource limits

Mon Jul 10 13:43:02 UTC 2000

> Another idea: Why are we running nnrpd as user "news"? The only cause I can
> think of is to spool articles which couldn't be transmitted to innd. If we
> add (optionally) another user we could seperate DoS problems like the one
> mentioned (some users opening some hundred connections to nnrpd).

Wouldn't it be better to limit how many connections per IP-Address are
allowed? Unfortunately this is not so easy to implement into the nnrpd
master daemon but it should be possible.

Heiko

Heiko Schlichting        | Freie Universität Berlin
heiko at FU-Berlin.DE       | Zentraleinrichtung für Datenverarbeitung (ZEDAT)
Telefon +49 30 838-54327 | Fabeckstraße 32
Telefax +49 30 838-56721 | 14195 Berlin