| DoS-Deflate catching to many IP's |
thegreatpretender

msg:3688480 | 1:49 pm on Jul 2, 2008 (gmt 0) | I started using Dos-Deflate,I am catching about 40 IP's everyday, I set the no of connections to get ban to 200 and ban them permananetly. Do you think 200 connections is reasonable numbers? Am I blocking legitimate visitors? Thanks
|
eelixduppy

msg:3688564 | 3:38 pm on Jul 2, 2008 (gmt 0) | I think that is reasonable. You could go a little bit lower and still be good in my opinion. If you need to allow a specific IP address to have over the allowable limit you are giving, then as of version 0.6 you can add those to a ignore.ip.list.
|
thegreatpretender

msg:3689093 | 3:10 am on Jul 3, 2008 (gmt 0) | Thanks for the reply. I tried to use ip.list but it seemed not sticking. The ip's I placed there are gone after a while. Thanks again.
|
|
|