[Proftpd-devel] RE: [Proftpd-user] MaxClients check: bug or not?

[Galen J. <Gal...@sa...>]

It seems to me that you would want to tally up all connected clients as =
I would assume they are planning to authenticate (but of course this =
could leave you open to a DOS).  If you only count authenticated users =
it seems to me that you could conceivably allow more than the MaxClients =
count to connect.

I believe the latter option possibility to be minimized and would vote =
for counting authenticated users to avoid the possible DOS.

=3DG=3D

-----Original Message-----
From: TJ Saunders [mailto:tj...@ca...]=20
Sent: Wednesday, January 21, 2004 5:20 AM
To: pro...@li...
Cc: pro...@li...
Subject: [Proftpd-user] MaxClients check: bug or not?



In reviewing the current open bugs, this one caught my attention:

  http://bugs.proftpd.org/show_bug.cgi?id=3D2311

As it correctly notes, the MaxClients documentation says that the
MaxClients check counts up the number of authenticated clients, and
compares that against the configured maximum.  However, the current code
actually tallies up all connected clients, including those that have not
yet authenticated.  Is this the actual behavior that most users have in
mind when configuring MaxClients?  Should MaxClients count up all =
clients,
or only those that have authenticated?

Cheers,
TJ

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~=
~~~~~~

   It is as natural to die as to be born, and to a little infant, the =
one is
   as painful as the other.

   	-Francis Bacon

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~=
~~~~~~


-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
ProFTPD Users List   <pro...@pr...>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html