standalone-nnrpd "dies" when hitting ressource limits

[Russ Allbery]

Sven Paulus <sven at tin.org> writes:

> the standalone nnrpd parent process dies if there are temporary problems
> when it is trying to fork(). This gives evil netizens the possibility to
> "shut down" the NNTP port remotely: Just open enough connections in
> parallel, so that the process hits the ressource limits (max. number of
> file descriptors or processes) and the parent nnrpd exit()s.  No, I
> don't think wrapper shellscripts are a real solution ...

> How about:

[...]

> This closes the connection when fork()ing has failed MAX_FORKS times and
> goes on accepting the next connection (maybe some children died in
> between, so there is room for new children).

This has now been committed.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>