>handle, and it makes the unit practically unreachable to remove the MAC
>of the unfortunate victim. I have a decent system for response and
>triage, but have been curious as to what else can be done.
You might also just disable their ethernet port?
>tendency to bring negative feelings towards my company as an ISP when
>the network has these moments, and I don't like having to call customers
>and deny them service due to what is a common problem in today's world.
Well, you've got to do what's going to be good for the majority.
>1. Instill some kind of pre network virus software. We do not at the
>moment simply due to the overhead our gateway deals with for what it's
>responsibilities are, and I am in the process of redesigning and
>improving the set-up. It is directly proportional to how fast my Linux
>skills are improving. :) (including instilling Cacti to monitor my
>links, as it has Karlnet SNMP and MIBs built in!)
A SBC Linux bridge/router will at least allow you to rate limit unwanted
traffic. Karlnet is good for filtering out unwanted traffic but it doesn't
allow any packet rate limiting.
_______________________________________________
Karlnet mailing list
Karlnet@WISPNotes.com
http://lists.wispnotes.com/mailman/listinfo/karlnet
|