Is Your e3000 Environment Secure? - by Mark Bixby

Is Your e3000 Environment Secure? - HPWorld 2003 page 86August 14, 2003
Configure sane connection limits
§Attackers can exhaust processor, memory, and disk
resources by making hundreds (or thousands) of
concurrent connections to network services
§Make sure each network service is configured with sane
connection limits
– :NMMGR global TCP and UDP parameters
– :NSCONTROL SERVER=name,min,max
– Apache MaxClients directive
– Samba "max smbd processes" parameter
§Unfortunately no connection limits within INETD