News for hackers. Stuff that matters.

A comment on Ban me at the IP level if you don't like me. Parent comment

Re:Ban me at the IP level if you don't like me by ronsor on Monday August 25, 2025 @04:27PM (#45018582)
> The latest was a slow loris approach where it takes forever for robots.txt to download.

I'd treat this in a client the same way as I do in a server application. If the peer is behaving maliciously or improperly, I silently drop the TCP connection without notifying the other party. They can waste their resources by continuing to send bytes for the next few minutes until their own TCP stack realizes what happens.

[ Parent | on HN ]
Re:Ban me at the IP level if you don't like me by conradludgate on Monday August 25, 2025 @05:23PM (#45019200)
How do you silently drop a TCP connection? Closing the socket fd usually results in a FIN packet being sent whether I want it to or not.

Additionally, it's not going to be using that many resources before your kernel sends it a RST next time a data packet is sent

[ Parent | on HN ]
Re:Ban me at the IP level if you don't like me by ronsor on Monday August 25, 2025 @05:32PM (#45019297)
TCP_REPAIR: https://tinselcity.github.io/TCP_Repair/
[ Parent | on HN ]