Date: Fri, 26 Jan 2001 11:58:59 +0200 From: Peter Pentchev <roam@orbitel.bg> To: Dennis Rand <dr@incorp.dk> Cc: freebsd-security@freebsd.org Subject: Re: ICMP attacks Message-ID: <20010126115858.B5418@ringworld.oblivion.bg> In-Reply-To: <3A715799.8EECF43@incorp.dk>; from dr@incorp.dk on Fri, Jan 26, 2001 at 10:55:21AM %2B0000 References: <NEBBIEGPMLMKDBMMICFNOEHBECAA.mit@mitayai.net> <3A715799.8EECF43@incorp.dk>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Jan 26, 2001 at 10:55:21AM +0000, Dennis Rand wrote: > I also have this problem but that is when i portscan my computer from another > host so is there a place or a log where i can check what IP has caused this You can make your firewall log all denied packets - it's those that cause ICMP responses, mostly. I'm not sure logging all denied packets is a good idea, though, especially if you expect - or even deem it possible - that you might be attacked. Trust me, I've had syslogd hog my CPU during a portscan :) G'luck, Peter -- When you are not looking at it, this sentence is in Spanish. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010126115858.B5418>