On Fri, Dec 16, 2011 at 9:17 PM, Alan DeKok <aland@deployingradius.com> wrote:
That is distinctly anti-social behavior from whoever owns the NAS.
Agreed.
Another solution is to use RADIUS. :)
Set up a proxy for ONLY that NAS. Call it "A". Have it proxy ALL packets to the local proxy you're already running, "B". This configuration should be very, very, small. You can strip out 99% of the normal server configuration.
In the configuration for "A", set "max_outstanding" to a low value, like 100 or 200. See raddb/proxy.conf for details.
Then, in the "post-proxy type Fail" section, set "do_not_respond".
This configuration limits the proxy load to no more than the upstream can handle. It also throws away packets when it receives too many.
It's a bit more work than iptables, but it's cross-platform, and guaranteed to work.
Alan DeKok. -
Bingo! That's what I was looking for. Thanks Alan. - N