Date: Sun, 13 Sep 1998 00:17:43 +0200 From: sthaug@nethelp.no To: dwhite@resnet.uoregon.edu Cc: hackers@FreeBSD.ORG, questions@FreeBSD.ORG Subject: Re: problem using 3 x znyx314 cards for 12 de ethernets Message-ID: <17840.905638663@verdi.nethelp.no> In-Reply-To: Your message of "Sat, 12 Sep 1998 13:41:07 -0700 (PDT)" References: <Pine.BSF.4.03.9809121340240.19785-100000@resnet.uoregon.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
> Broadcast pings are ignored by default in 2.2.7 -- it's a common DoS > attack to flood ping the broadcast address. As far as I can see, this is incorrect. 2.2.7 was fixed so that the net.inet.icmp.bmcastecho sysctl variable would *work* and do what you expected, but it still defaults to on. See $Id: ip_icmp.c,v 1.22.2.3 1998/05/26 11:38:48 dg Exp $ line 74-76: static int icmpbmcastecho = 1; SYSCTL_INT(_net_inet_icmp, OID_AUTO, bmcastecho, CTLFLAG_RW, &icmpbmcastecho, 0, ""); It still defaults to on in FreeBSD-current: $Id: ip_icmp.c,v 1.30 1998/05/26 11:34:30 dg Exp $ line 72-74: static int icmpbmcastecho = 1; SYSCTL_INT(_net_inet_icmp, OID_AUTO, bmcastecho, CTLFLAG_RW, &icmpbmcastecho, 0, ""); I believe it should be turned *off* by default, and hope this is fixed before 3.0 is released. Steinar Haug, Nethelp consulting, sthaug@nethelp.no To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?17840.905638663>