From owner-freebsd-questions  Mon Oct 21  8:25:42 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 9BC1037B401
	for <freebsd-questions@freebsd.org>; Mon, 21 Oct 2002 08:25:40 -0700 (PDT)
Received: from merle.it.northwestern.edu (merle.it.northwestern.edu [129.105.16.57])
	by mx1.FreeBSD.org (Postfix) with ESMTP id EFFAF43E42
	for <freebsd-questions@freebsd.org>; Mon, 21 Oct 2002 08:25:39 -0700 (PDT)
	(envelope-from mre037@merle.acns.nwu.edu)
Received: from localhost (mre037@localhost)
	by merle.it.northwestern.edu (8.8.7/8.8.7) with ESMTP id KAA03511;
	Mon, 21 Oct 2002 10:25:26 -0500 (CDT)
Date: Mon, 21 Oct 2002 10:25:24 -0500 (CDT)
From: Redmond Militante <mre037@merle.acns.nwu.edu>
To: Roman Neuhauser <neuhauser@bellavista.cz>
Cc: freebsd-questions@freebsd.org
Subject: Re: limiting closed port rst response from ...
In-Reply-To: <20021021152236.GD402@freepuppy.bellavista.cz>
Message-ID: <Pine.HPX.4.10.10210211024270.20532-100000@merle.acns.nwu.edu>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG


thanks.


On Mon, 21 Oct 2002, Roman Neuhauser wrote:

> # mre037@merle.acns.nwu.edu / 2002-10-21 09:38:52 -0500:
> > hi all
> > 
> > i saw this messages in /var/log/messages over the weekend repeated several
> > times
> > 
> > oct 21 09:35:15 hostname /kernel: limiting closed port rst response from
> > 384 to 200 packets per second
> > 
> > also listed in the log were several attempts to connect to the machine via
> > anonymous ftp
> > 
> > can anyone tell me what the limiting closed port... message means?
> 
>     * AFAICT *
> 
>     that means that your box is trying to circumvent a possible DoS
>     attack. this message is of the same kind as those
>     
>     previous message repeated N times 
> 
>     lines in /var/log/messages.
> 
> -- 
> If you cc me or take the list(s) out completely I'll most likely
> ignore your message.
> 

Redmond Militante
Northwestern University, Evanston, IL. USA
r-militante@northwestern.edu
847-467-7617


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message