[TriLUG] defense against dictionary attacks?

[Mike Johnson]

Aaron S. Joyner [aaron at joyner.ws] wrote:
> 
> Since you don't have the overhead of start-up costs, you can even check 
> the log file more often, say every 15 seconds.  This would allow you to 
> respond more quickly to bursts of traffic (the whole purpose of the 
> script to start with).  By the time you've gotten this far, you've begun 
> to realize how much faster (yet less flexible) this program would be in 
> C, as opposed to PERL.  Once you've fully explored the problem domain 

For extra credit, send syslog to a named pipe and read from that in an
endless loop.  You'll find this much faster than 'checking' a logfile.

BTW, I understand your rant, but I thought I'd add this in case someone
was actually wanting to head down this route.

Mike
-- 
"Spare me your space-age technobabble Atilla The Hun!" --  Zapp Brannigan

GNUPG Key fingerprint = ACD2 2F2F C151 FB35 B3AF  C821 89C4 DF9A 5DDD 95D1
GNUPG Key = http://www.enoch.org/mike/mike.pubkey.asc

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 230 bytes
Desc: not available
URL: <http://www.trilug.org/pipermail/trilug/attachments/20040626/e60e6d18/attachment.pgp>