Re: udp packet storms

[wietse () wzv win tue nl (Wietse Venema)]

> Hmm; I wonder if it's possible to tell tcpd to rate-limit a particular
> service?

Easy, use the "twist" option to run a second-level wrapper instead of
the regular daemon. The second-level wrapper creates a lock file with
its PID, runs the real daemon, and removes the lockfile N seconds
later. No daemon is run when the lock file specifies the PID of an
existing process.

Don't put the lock in a world-writable directory.

        Wietse