Discuss mailing list

[Alex Hanselka <alex AT opennicproject.org>]

On 5/23/2013 2:19 AM, Psilo wrote:

Yes I see a big difference looking at the bandwidth graphs.

Without the iptables filters:

Now WITH the iptables filters:

The average output has been divided by 1000.

Psilo

Absolutely! It is definitely worth doing.  However, if you have a server in a location where bandwidth is very expensive, the inbound requests might still kill you.  This was the case with Julian in fact.  I do agree that these iptables are worth doing and everyone should use them.  Remember, you aren't just saving your bandwidth in this case, you are saving the recipient of the attack.  You are just collateral damage!

Attachment: pngxyPc1IgOum.png
Description: PNG image

Attachment: pngZoTPQpF8ho.png
Description: PNG image