bezeqint
Mar 06, 2012Nimbostratus
iRule to mitigate attack
hello,
i need to protect mail servers from a virus attack.
we have a network with users. some of them are using the mail servers, some of them are attacking the mail servers. we see that some users create 4000 short connection to the mail servers - the concurrent connection for each user is 1.
what i would like to do is:
1. if a user a part of a network that belongs to a group, he can open, lets say, 10 new connections per second (not concurrent! the rate of opening a tcp connection - a user can keep 500 connections, but can create only 10 new per second)
2. the rest of the users can open connections at any rate.
can i do that using iRule?
can iRule limit the rate of opening new connections?
how do i write something like that?