Hum.. but what happen if the workstation is infected? the virus will do a DoS to the user of the workstation, the firewall will block valid connections. > On Tue, Dec 09, 2003 at 10:06:50AM -0700, Michael Gale wrote: >> Hello, >> >> You could try using a rate limit -- you could allow a machine to make >> lets say 10 outbound >> connections a second and then ... >> >> Depending on your network policy you could drop or log all other >> outbound request. >> > > This is what I'm planning to do.. and this is also the reason I was > asking the questions in the original mail :-) > > -- Pasi Kärkkäinen > > ^ > . . > Linux > / - \ > Choice.of.the > .Next.Generation.
