OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: texasduo (texasduotexascowboys.net)
Date: Wed May 01 2002 - 18:34:16 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

     
    Q: …”Is it possible to implement data control for a honeypot connection,
    i.e. limit outbound connections from the honeypot to N
    connections/second (or similar), using a CISCO router running IOS 12.x?
    (+f/w feature set?”…
     
    A: Yes, absolutely.
     
    You should consider using the Committed Access Rate (CAR) feature of
    IOS. Cisco recommends this feature to be used to prevent against
    Denial of Service attacks.
     
    I've attached the URL which is a good starting point, and you can write
    me if you need additional specific information.
     
    HYPERLINK
    "http://www.cisco.com/warp/public/63/car_rate_limit_icmp.html"http://www
    .cisco.com/warp/public/63/car_rate_limit_icmp.html
     
    Regards,
    Roger Reynolds
     
      

    ---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.351 / Virus Database: 197 - Release Date: 4/19/2002
    image001.jpg