[ATrpms-users] dl.atrpms.net connection problems

[Axel Thimm]

On Sun, Nov 11, 2007 at 10:57:15AM +1100, Jean-Yves Avenard wrote:
> On Nov 11, 2007 1:59 AM, Karl Grindley <karl at spacechimp.net> wrote:
> >
> >
> > Another IP blocked?  Note that I haven't hit atrpms in weeks, until this
> > morning to find atrpms dropping packets. (from 71.174.103.34)

This had 40 connections.

> Honestly, I know believe that the solution is worse than the problem ...
> 
> Blocking legitimate users just to prevent an extremely occasional DOS
> is just unacceptable

Actually the scripts are not for the occasional DoS, but for the
download accelerators people use every 6 months on Fedora release
times to suck down the isos faster than others. I just need to wait
for 5 minutes these days to find IP addresses doing 100+ connections
with range based http gets to get all the server resources for
themselves to pull down the isos as fast as possible (for them).

And the scripts are not new, I'm using them since about FC3 or
FC4. What is new is yum's rebroken behaviour. Ask google for yum and
CLOSE_WAIT (or keepalive code) and one will see that it has a bad
history.
-- 
Axel.Thimm at ATrpms.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.atrpms.net/pipermail/atrpms-users/attachments/20071111/f3773e23/attachment.bin