OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: MAJOR DDOS
From: Mike Tancsa (mikesentex.net)
Date: Sun Apr 02 2000 - 17:03:21 CDT


At 08:28 PM 4/2/2000 +0100, Cliff Rowley wrote:
> > If its all "legitimate" traffic, I dont think
> > options ICMP_BANDLIM
> > will help.
>
>It wouldnt help if it was not legitimate traffic either, since ICMP is
>portless (meaning that the connections are either TCP or UDP) - just
>clearing that up.

I thought the point of ICMP_BANDLIM was to throttle back the amount of ICMP
error traffic in response to a whole whack of bogus connection attempts.

         ---Mike

To Unsubscribe: send mail to majordomoFreeBSD.org
with "unsubscribe freebsd-security" in the body of the message