nnrpd issue

[Jeffrey M. Vinocur]

On Tue, 19 Nov 2002, Pavel V. Knyazev wrote:

> Don't you think 60 seconds is TOO much for a good work?

Can you attach gdb to one of these nnrpds and see where it is working?

(You may need to recompile with `make warnings` to get debugging 
information.)


> nnrpd doesn't hesitate to eat all CPU time. INN is susceptible to
> overload attacks somehow. 

Have you set `nicekids` or `nicennrpd` in inn.conf?


> - i'd like to see 'max connections per reader' option at least. At any
> moment now an attacker may open a lot of sessions and ask for a 'next'
> command.

If you're spawning nnrpd out of INN, there are some flags to innd that may 
help.  If you require more complicated stuff, a Perl authentication script 
may help.


-- 
Jeffrey M. Vinocur
jeff at litech.org