securing Ubuntu and firewall

[Mike Bird]

On Sat, 2006-02-25 at 09:15, Luis M wrote:
> Sorry to jump in the middle of this conversation but firewalls do
> protect against DoS. Read below:
> 
> On 2/24/06, Christian Eichert <moga at mx.homelinux.org> wrote:
> > Tom Smith schrieb:
> [snip]
> > > Firewalls can also help protect against DoS attacks,
> >
> > bullshit !!! how does a firewall protects against a DoS Attack ?
> 
> in iptables you can throttle the number of packets accepted (per
> second) to a given port.

Correct.  You can alternatively throttle the rate of packets
with the syn flag set, which limits the rate of new incoming
connections without limiting the speed of established connections.

This can be useful for keeping mail, web, or rsync running
moderately well during a DOS attack.

--Mike Bird