OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Lars Gaarden (larsgtrustix.com)
Date: Thu Mar 08 2001 - 19:06:02 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Elliot Lee wrote:

    > On Fri, 9 Mar 2001, Chris Evans wrote:
    >
    >
    >> Ouch. I wasn't aware it was a big requirement, I'll add it to the TODO.
    >>
    >> Doesn't this sort of policy belong outside an ftpd, though? vsftpd can now
    >> run with all PORT connections coming from port 20 and all PASV connections
    >> being restricted to an admin settable port range. That should be
    >> sufficient to use Linux kernel firewall + QoS to set limits.
    >
    >
    > How would you handle bandwidth restrictions on a per-user or per-group
    > basis?

    Or bandwith restrictions per domain.

    Say you have an FTP server at a large university in .cc, and you want
    to do the following:

    Allow a lot of bandwith for clients coming from university.cc.
    Blood is thicker than water, give decent bandwith to clients from .cc.
    Starve the rest of the world. 

    -- 
LarsG