[mirror-admin] Gigabit NIC saturated.. [Re: Fedora 9 bitflip... slow becauseof the updates

[Mogens Kjaer]

Paul Mezzanini wrote:
...
> As for those pesky download accelerators...  Just today I blocked all
> resumes for .iso files on my server.  In roughly 15 seconds I had over 60
> hits for one file alone across 4 IP addresses.  I tried the block on the
> page in the past but it had very little effect.  After some snooping around,
> I learned that some flavor of accelerator just does not put an end on the
> range and dumps the connect after it gets the bytes it wants.  That bypasses
> the rules we have listed.
...
> How does everyone else handle this problem?

I have a rewrite apache rule that redirect .iso http requests
to using ftp access on the same server, and I have a

max_per_ip=1

in the vsftpd.conf file. That takes care of most of the
"bad guys". Of course it won't help if the requests
come from different IP addresses.

Mogens

-- 
Mogens Kjaer, Carlsberg A/S, Computer Department
Gamle Carlsberg Vej 10, DK-2500 Valby, Denmark
Phone: +45 33 27 53 25, Fax: +45 33 27 47 08
Email: mk at crc.dk Homepage: http://www.crc.dk

--