Rob  writes:
> I would guess the latter too, except that they tend to wait the full

quoted text
> default 10 seconds until the first 250 response. I'm looking forward

> to increasing the stutter time to something on the order of 60 seconds

> and watching to see what happens then.

I have reports that increasing the -s value to 4 seconds serves to

keep the stupid ones around for (you guessed it) four times as long,

at least for the tarpitted ones.  So the host which would hang on for

404 seconds earlier now beavers on for 1616, and so on.
- P

--

Peter N. M. Hansteen, member of the first RFC 1149 implementation team

http://bsdly.blogspot.com/ http://www.datadok.no/ http://www.nuug.no/

"Remember to set the evil bit on all malicious network traffic"

delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.