Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 25 Nov 2003 16:45:05 +0200
From:      "Vahric MUHTARYAN" <vahric@doruk.net.tr>
To:        <freebsd-ipfw@freebsd.org>, <freebsd-questions@freebsd.org>
Subject:   ICMP_BANDLIM and TCP_DROP_SYNFIN ?! 
Message-ID:  <007401c3b362$b6e984f0$110d3ad4@VAHOXP>

next in thread | raw e-mail | index | archive | help
Hi Everybody 

	I red ipfw documents and I saw that "TCP_DROP_SYNFIN is not
recommended for web server" no any explanation about it ?! Do you have
any idea for why ?! 

	ICMP_BANDLIM in documents ; "Enable icmp error response bandwith
limiting . This will protect from D.O.S. packets attacks" --> Does it
means all type of ICMP attacks ?! or another thing if I drope all icmp
traffic Do I need to use it ?! 


	Vahric   



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?007401c3b362$b6e984f0$110d3ad4>