Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 31 May 2001 16:22:56 -0500 (CDT)
From:      Mike Silbersack <silby@silby.com>
To:        Liran Dahan <lirandb@netvision.net.il>
Cc:        <freebsd-security@freebsd.org>
Subject:   Re: ICMP Killed me and my machine
Message-ID:  <20010531162124.B74220-100000@achilles.silby.com>
In-Reply-To: <001601c0ea1f$19c069a0$b88f39d5@a>

next in thread | previous in thread | raw e-mail | index | archive | help

On Fri, 1 Jun 2001, Liran Dahan wrote:

> My machines are being attacked over hours and those are the only messages i found:
> Jun  1 00:07:30 freebsd /kernel: Limiting icmp unreach response from 710 to 20 packets per second
> Jun  1 00:05:49 freebsd /kernel: Limiting icmp unreach response from 1092 to 20 packets per second
> i tonoz of messages like that...
>
> I Had Orange light ON - TRAF on my hub
> But i was down including all my machines..
>
> -Liran Dahan- (lirandb@netvision.net.il)

Someone's definitely flooding you.  You're going to have to use tcpdump,
see if you can figure out what's hitting you, and have someone upstream
filter it.  There's probably nothing more you can do on the machines
themselves.

Mike "Silby" Silbersack


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010531162124.B74220-100000>