Re: UDP firewall

Terracotta wrote:

Hi:

we have a serious problem on our UDP server, which receives data from
our client, but sometimes there just too much spam (same messages send
to our
server at same time, or during a very short period).

Since you call it "spam" I presume it is unsolicited and from unwanted sources?
If not you could use more appropriate terminology.


my question is, what's the most efficient way to filters or block such
spam,

Use a firewall and only allow data from accepted sources. Get a better firewall
which allows you to rate limit traffic.

I mean in the socket level..

You can't at the socket level, only at the network interface. If you want your
program to filter it then it has to read it, determine that it is "spam" and
ignore it. However, with UDP that's probably not possible because it's not a
guaranteed delivery mechanism - if packets arrive too fast they will be
dropped. You would have to correct your communications protocol to handle those
lost packets and that's tricky, one of the reasons UDP is not always an
appropriate transfer protocol.

I expect detailed answer,

Really? That's a rather arrogant presumption.

--
Nigel Wade
.

Relevant Pages

  • Re: Think that China is reading here to.
    ... > What is the significance of whether the spam packets are UDP or TCP? ... Since UDP is a connectionless protocol, ... UDP messenger spam is usually forged and almost impossible to trace back ...
    (comp.security.firewalls)
  • Re: Update: Messenger Spam
    ... > level3.net is another that could use a wakeup call. ... port 1026 UDP ... > 210.5.22.23) as a major source of this spam, ...
    (comp.security.firewalls)
  • Re: Update: Messenger Spam
    ... port 1026 UDP ... > email/web host get RBL? ... > 210.5.22.23) as a major source of this spam, ...
    (microsoft.public.win2000.security)
  • Re: Lots of incoming traffic on UDP 1026 and UDP 1027?
    ... I believe it's windows messenger traffic, most likely spam. ... I know that ICQ used udp port 1027. ...
    (Security-Basics)
  • UDP firewall
    ... we have a serious problem on our UDP server, ... our client, but sometimes there just too much spam (same messages send ... I expect detailed answer, code sample ...
    (comp.lang.java.programmer)