Networking Forums

Networking Forums > Computer Networking > Linux Networking > Hoeveel routing entries

Reply
Thread Tools Display Modes

Hoeveel routing entries

 
 
Davide Bianchi
Guest
Posts: n/a

 
      05-04-2005, 01:51 PM
On 2005-05-04, Eddy <eddy@invalid> wrote:
> A block ip-addresses from hackers, spammers and others with:
> /sbin/route add -host <ip-adres> reject


Why don't you use a firewall (and/or) a correct antispam configuration
for your mail server for this? This way the packets that are blocked
by the firewall don't even get to the routing part and you don't have
problems related to performance of the routing table.

Davide

--
It's no wonder they call it WinNT; WNT = VMS++;
-- Chris Abbey
 
Reply With Quote
 
 
 
 
Eddy
Guest
Posts: n/a

 
      05-04-2005, 02:06 PM
Hoi,

Spammers, hackers, open proxies en ander ongewenst volk blokkeer ik op
m'n server met:

/sbin/route add -host <ip-adres> reject

De lijst is aardig gegroeit in de loop dertijd en "netstat -rn" levert
enkele honderden entries op. Wat zijn de performance of andere limieten
voor het aantal entries in de "routing" tabel (2.4.27 kernel)?

Eddy
 
Reply With Quote
 
Eddy
Guest
Posts: n/a

 
      05-04-2005, 02:11 PM

Sorry... right question, wrong language...

Second attempt:

A block ip-addresses from hackers, spammers and others with:

/sbin/route add -host <ip-adres> reject

The list (netstat -rn) is getting larger and larger (few hundred
entries). What are the (performance) limits for the amount of routing
entries (2.4.27 kernel)?

Eddy
 
Reply With Quote
 
Davide Bianchi
Guest
Posts: n/a

 
      05-04-2005, 04:58 PM
On 2005-05-04, Eddy <eddy@invalid> wrote:
> Can your firewall hold a thousand+ rules?


Yes. Well, isn't really smart to do (it takes a lot to load the whole
ruleset and maintenance is a pain), so is much better to 'cluster' the
whole stuff in subnets.

> It is not only for mail, but ssh, http, ftp ...etc.


I'd do the other way around: don't lock OUT the ones you don't want, but
allow IN only the ones you want.

> I don't have a performance problem (yet). I just want to know when the
> linux kernel gives up on my increasing routing table.


AFAIK the routing table start with a fixed size of 19 Mb, and then
increase using more memory. I don't remember of any 'limit' size.

Davide

--
I'm an apatheist. The question is no longer interesting, and the
answer no longer matters.
-- from alt.sysadmin.recovery
 
Reply With Quote
 
Eddy
Guest
Posts: n/a

 
      05-04-2005, 05:39 PM
Davide Bianchi wrote:
> On 2005-05-04, Eddy <eddy@invalid> wrote:
>
>>A block ip-addresses from hackers, spammers and others with:
>>/sbin/route add -host <ip-adres> reject

>
>
> Why don't you use a firewall (and/or) a correct antispam configuration
> for your mail server for this?

Can your firewall hold a thousand+ rules? My Vigor can't.
It is not only for mail, but ssh, http, ftp ...etc.
(btw. Spamassassin and RBLs are already in place)


> This way the packets that are blocked
> by the firewall don't even get to the routing part and you don't have
> problems related to performance of the routing table.

I don't have a performance problem (yet). I just want to know when the
linux kernel gives up on my increasing routing table.
 
Reply With Quote
 
Coenraad Loubser
Guest
Posts: n/a

 
      05-05-2005, 08:18 AM
Davide Bianchi wrote:
> On 2005-05-04, Eddy <eddy@invalid> wrote:
>
>>Can your firewall hold a thousand+ rules?

>
>
> Yes. Well, isn't really smart to do (it takes a lot to load the whole
> ruleset and maintenance is a pain), so is much better to 'cluster' the
> whole stuff in subnets.
>
>
>>It is not only for mail, but ssh, http, ftp ...etc.

>
>
> I'd do the other way around: don't lock OUT the ones you don't want, but
> allow IN only the ones you want.
>

Heh heh heh, al 3 biljoen van hulle?
 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
ARP entries RTK Windows Networking 0 03-26-2012 01:37 PM
Incorrect automatic route entries in routing table Andy L Windows Networking 0 12-18-2006 06:21 PM
I need some real DNS entries. Wireless Networks 7 09-06-2005 05:04 AM
DHCP Entries =?Utf-8?B?TGFubWFu?= Windows Networking 1 03-11-2005 12:09 AM



1 2 3 4 5 6 7 8 9 10 11