Multiple Platform remote CPU load issue in Samba 1.x and 2.x

Christopher R. Hertel crh at nts.umn.edu
Wed Jun 14 17:57:19 GMT 2000


On Jun 15,  3:49am, David Collier-Brown wrote:
> Subject: Re: Multiple Platform remote CPU load issue in Samba 1.x and 2.x
> "Christopher R. Hertel" wrote:
> > As I mentioned,
> > nmbd uses UDP so there is no connection to close.  Since nmbd suffers from
> > this just as smbd does, you have a choice.  You can either respond to
> > every bogus packet (assuming that the source address is legit) or you can
> > quietly dump them on the floor.
>
> 	I'd distinguish this from the script-kiddie approach
> 	and treat it as a "drop on floor" case, just as you
> 	suggest.

Just don't log every single one or you've got another DoS when you fill up the
disk with log files.

Chris -)-----

-- 
Christopher R. Hertel -)-----                   University of Minnesota
crh at nts.umn.edu              Networking and Telecommunications Services


More information about the samba-technical mailing list