From owner-freebsd-questions Sat Sep 12 15:18:07 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id PAA18772 for freebsd-questions-outgoing; Sat, 12 Sep 1998 15:18:07 -0700 (PDT) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from verdi.nethelp.no (verdi.nethelp.no [158.36.41.162]) by hub.freebsd.org (8.8.8/8.8.8) with SMTP id PAA18755 for ; Sat, 12 Sep 1998 15:18:02 -0700 (PDT) (envelope-from sthaug@nethelp.no) From: sthaug@nethelp.no Received: (qmail 17842 invoked by uid 1001); 12 Sep 1998 22:17:43 +0000 (GMT) To: dwhite@resnet.uoregon.edu Cc: hackers@FreeBSD.ORG, questions@FreeBSD.ORG Subject: Re: problem using 3 x znyx314 cards for 12 de ethernets In-Reply-To: Your message of "Sat, 12 Sep 1998 13:41:07 -0700 (PDT)" References: X-Mailer: Mew version 1.05+ on Emacs 19.34.2 Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Date: Sun, 13 Sep 1998 00:17:43 +0200 Message-ID: <17840.905638663@verdi.nethelp.no> Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > Broadcast pings are ignored by default in 2.2.7 -- it's a common DoS > attack to flood ping the broadcast address. As far as I can see, this is incorrect. 2.2.7 was fixed so that the net.inet.icmp.bmcastecho sysctl variable would *work* and do what you expected, but it still defaults to on. See $Id: ip_icmp.c,v 1.22.2.3 1998/05/26 11:38:48 dg Exp $ line 74-76: static int icmpbmcastecho = 1; SYSCTL_INT(_net_inet_icmp, OID_AUTO, bmcastecho, CTLFLAG_RW, &icmpbmcastecho, 0, ""); It still defaults to on in FreeBSD-current: $Id: ip_icmp.c,v 1.30 1998/05/26 11:34:30 dg Exp $ line 72-74: static int icmpbmcastecho = 1; SYSCTL_INT(_net_inet_icmp, OID_AUTO, bmcastecho, CTLFLAG_RW, &icmpbmcastecho, 0, ""); I believe it should be turned *off* by default, and hope this is fixed before 3.0 is released. Steinar Haug, Nethelp consulting, sthaug@nethelp.no To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message