OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Security Question

From: J.R. Bullington (bullijrinnovatim.com)
Date: Mon Oct 03 2005 - 11:56:00 CDT


Hi All --

I have been a member of this list for a while but I actually have a question
that I can't answer.

MySQL v4.1.14-nt on Win2k3 Server

I've got someone who is trying to get in, but I have locked it down. Methods
used include, but are not limited to:

No Outside Root Access
System DSNs for Web connectivity
Strong Passwords for each user
User Permissions different for each purpose

Here's the question -- It's a DoS attack and it's locking up the system for
other users (max_connections_allowed).

Anything I can do extra via MySQL that will keep this person away, or
perhaps free up the server? I would rather not increase the max_conn_allowed
var as it's already at 800 (more than I need).

Do not have access to the Router (I wish I did, ACLs are such a great
thing), but have full Admin rights to the server.

Thanks everyone!

J.R.


  • application/x-pkcs7-signature attachment: smime.p7s