On Wed, Oct 18, 2000 at 01:39:56PM +0200, Fredrik Rambris wrote: > > You can also use the ingress policer but that's a bit after the fact, as the > > HOWTO says 'like throwing away half the letters you receive, in the hope > > that people will stop sending you them'. > > I could live with that (if it works). In the shaping example in the > howto. How would ingress be implemented? What's the syntax? See the dDoS example in the HOWTO, it installs an ingress policer on SYN packets. I tried it at home and had some problems, tc gave an error, but perhaps I lack features in the kernel. Regards, bert hubert -- PowerDNS Versatile DNS Services Trilab The Technology People 'SYN! .. SYN|ACK! .. ACK!' - the mating call of the internet
