Added points in KKDCP connections to prevent DoS attacks.

doc/sample.config

@@ -55,7 +55,7 @@ auth = "plain[passwd=./sample.passwd]"
 # system calls allowed to a worker process, in order to reduce damage from a
 # bug in the worker process. It is available on Linux systems at a performance cost.
 # The performance cost is roughly 2% overhead at transfer time (tested on a Linux 3.17.8).
-isolate-workers = true
+#isolate-workers = true
 
 # A banner to be displayed on clients
 #banner = "Welcome"
@@ -216,7 +216,7 @@ min-reauth-time = 300
 # Banning clients in ocserv works with a point system. IP addresses
 # that get a score over that configured number are banned for
 # min-reauth-time seconds. A wrong password attempt is 10 points,
-# a connection is 1 point.
+# a KKDCP POST is 1 point, and a connection is 1 point.
 #
 # Set to zero to disable.
 max-ban-score = 50