请输入您要查询的百科知识:

 

词条 Stockade (software)
释义

  1. The rate limiting approach

  2. See also

  3. References

{{Infobox software
| name = Stockade
| caption = Stockade
| author = Centre for Advanced Internet Architectures (CAIA) at Swinburne University of Technology
| developer = Malcolm Robb, Grenville Armitage, Adam Black
| latest_release_version = 0.2
| latest_release_date = {{release date|2007|03|16}}
| operating_system = FreeBSD
| genre = Spam mitigation
| license = GPL v2
| website = http://caia.swin.edu.au/stockade/
}}

Stockade is a TCP-layer blocking tool written in C++. It denies TCP/IP access to registered IP addresses by using the ipfw packet filter. It targets spam prevention, but may also be used against other attackers (e.g. brute force password crackers.)

The rate limiting approach

This approach leverages the superior determination exhibited by legitimate senders. In this respect, it may be considered similar to greylisting. Originally, the authors conceived an MT Proxy to rate-limit the SMTP connections of messages believed to be spam. That worked by adding a dummynet rule for frequent senders who had been sending messages that triggered an unreliable statistical analysis.[1]

A key limitation of the original scheme was the consumption of local resources (in the SMTP proxy). Stockade approach introduces the notion that an inbound TCP connection may be rejected with some random probability proportional to the level of spam already seen from the connection’s originator over some configurable period of time.[2] That probability is subject to a decay, configured as a halving time period, so that each IP address is eventually rehabilitated. That way, stockade provides for fully automatic spam mitigation.

See also

{{Portal|Free and open-source software}}
  • IPQ BDB implements a similar random blocking approach in C using Linux's iptables.
  • Fail2ban is a generic intrusion prevention system, featuring multiple blocking techniques and preconfigured for a variety of server applications.
  • DenyHosts is a similar tool, specific for thwarting SSH server attacks.

References

1. ^{{cite web |url=http://caia.swin.edu.au/reports/040326A/CAIA-TR-040326A.pdf |title=FreeBSD server anti-spam software using automated TCP connection control |author=Minh Tran |date=2004-04-03 |work=CAIA Technical Report 040326A |publisher=Swinburne University of Technology |accessdate=2010-04-13}}
2. ^{{cite web |url=http://caia.swin.edu.au/pubs/ATNAC06/Tran_M2m.pdf |title=Mitigating Email Spam by Statistical Rejection of TCP Connections Using Recent Sender History |author=Minh Tran, Grenville Armitage |date=2006-12-19 |work=Australian Telecommunication Networks and Application Conference 2006 |publisher=Swinburne University of Technology |accessdate=2010-04-13}}
{{DEFAULTSORT:Stockade (Software)}}

3 : Computer security software|Anti-spam|Free security software

随便看

 

开放百科全书收录14589846条英语、德语、日语等多语种百科知识,基本涵盖了大多数领域的百科知识,是一部内容自由、开放的电子版国际百科全书。

 

Copyright © 2023 OENC.NET All Rights Reserved
京ICP备2021023879号 更新时间:2024/9/26 2:19:06