Raimo Niskanen wrote:
quoted text
> On Tue, Dec 11, 2007 at 01:15:11AM +1300, Joel Wiramu Pauling wrote:
>> Tip.
>>
>> Don't allow password challenge. Problem solved. Just use key'd ssh and this
>> problem disappears.
>>
> 
> Bin there, done that.
> 
> You answered the wrong question.

I think you got the right answer many times so far, but you just refuse 
to take the advise. People have told you many times to just use pf and 
be done with it.

You just reply and dismiss them like one here:

"I was adviced for pf, but right now a simple ssh-config and 
hosts.allow/deny is serving me fine. I will learn and use pf in due course."

quoted text
> I want to know if and what I can do (on the server side) about HTTP
> clients that put sockets on my httpd server in state CLOSE_WAIT and
> thereby chew up all sockets for the server causing a kind of
> denial of service state.

People have giving you the answer over and over, but it is up to you to 
listen tot he advise.

quoted text
> And yes, I have googled for "HPPT server socket CLOSE_WAIT" and
> did not get much wiser.

I am not sure you actually did, but I will give you the benefit here.

Again, the same answer and same advise. Get with it and use pf.

If you google it, you would have seen exactly the answer and example to 
your question here yet again using pf:

http://openbsd.org/faq/pf/filter.html#synproxy

It one thing to ask for help and advise, users here have given you 
plenty of really good one, it's an other to refuse it, dismiss it and 
come back saving no one tell you the answer, or provide you answer to 
the wrong question.

The answer to your problem is just to use PF, or may be the real problem 
is between the monitor and the chair.

Please, just read on it and do it right and stop telling people are not 
helping you. They are and they give you the right answer, but you refuse 
them.
  Your computer(s), your choice, that I get it, but then don't say you 
don't get help.

Great FAQ on PF and it's easy to read:

Spend the same amount of time reading it as you write emails and you 
will know it much better then I looks like.

http://openbsd.org/faq/pf/

If you want more then read great docs on it here:

http://www.bsdly.net/~peter/pf.html

and if that still not answering your questions, then get the book:

http://nostarch.com/frameset.php?startat=pf

So far ALL the answers to your various questions on the subject and the 
variation of it is to use PF, so just do it.

Hope this help you some.

Best,

Daniel