From owner-freebsd-questions Wed Jul 11 1: 8: 8 2001 Delivered-To: freebsd-questions@freebsd.org Received: from spade.pacific.net.sg (spade.pacific.net.sg [203.120.90.71]) by hub.freebsd.org (Postfix) with ESMTP id 7171C37B401 for ; Wed, 11 Jul 2001 01:08:04 -0700 (PDT) (envelope-from nchee_hoong@pacific.net.sg) Received: from pop2.pacific.net.sg (pop2.pacific.net.sg [203.120.90.86]) by spade.pacific.net.sg with ESMTP id f6B882m27713; Wed, 11 Jul 2001 16:08:02 +0800 (SGT) Received: from pacific.net.sg ([203.208.143.50]) by pop2.pacific.net.sg with ESMTP id QAA10804; Wed, 11 Jul 2001 16:08:01 +0800 (SGT) Message-ID: <3B4C0AB9.8FFC7181@pacific.net.sg> Date: Wed, 11 Jul 2001 16:13:45 +0800 From: Kelvin Ng Chee Hoong X-Mailer: Mozilla 4.77 [en] (WinNT; U) X-Accept-Language: zh-TW,en MIME-Version: 1.0 To: Joseph Gleason Cc: "freebsd-questions@FreeBSD.ORG" Subject: Re: Minimize ICMP packets References: <3B4BFCE8.3EE5720@pacific.net.sg> <008801c109d8$eb40e850$0b2d2d0a@battleship> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Hi Joseph ; First of all , thank you very much for your information. I've set variable of icmplim to 30 but this variable seems does not limit the ICMP packet size to max 30 bytes. When I did a ping to my FBSD machine with packet size of 18024 bytes, it still accept the larger ICMP packets rather than to discard . Joseph Gleason wrote: > kernel option: > options ICMP_BANDLIM > > Does this. It is default in generic. > > I am not certain of this but I assume sysctl variable net.inet.icmp.icmplim > controls the ammount it lets through. Someone want to confirm or deny this? > > Joe Gleason > > ----- Original Message ----- > From: "Kelvin Ng Chee Hoong" > To: > Sent: Wednesday, July 11, 2001 03:14 > Subject: Minimize ICMP packets > > > Hi ; > > I want my FBSD machine to accept ICMP packets (ping) from source > > anywhere , but limited to number of ICMP packets size and number of > > connection ping concurrently . Any ICMP packets that beyond the > > criteria will be discarded . > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-questions" in the body of the message > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message