From owner-freebsd-questions Fri Sep 14 6:37:33 2001 Delivered-To: freebsd-questions@freebsd.org Received: from gekko.ms-agentur.de (server.ms-agentur.de [62.153.134.194]) by hub.freebsd.org (Postfix) with ESMTP id D728F37B401 for ; Fri, 14 Sep 2001 06:37:27 -0700 (PDT) Received: from i-clue.de (automatix.i-clue.de [192.168.0.112]) by gekko.ms-agentur.de (8.9.3/8.9.3/SuSE Linux 8.9.3-0.1) with ESMTP id PAA24419; Fri, 14 Sep 2001 15:46:40 +0200 Message-ID: <3BA20811.7030708@i-clue.de> Date: Fri, 14 Sep 2001 15:37:21 +0200 From: Christoph Sold User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; de-AT; rv:0.9.3+) Gecko/20010905 X-Accept-Language: de, en MIME-Version: 1.0 To: KurtChen Cc: freebsd-questions@FreeBSD.ORG Subject: Re: [help]-about /kernel: Limiting open port RST response from 288 to 200 packets per second References: <000b01c13d0e$aad0ed60$b4a449d3@cnctv.com.tw> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG KurtChen wrote: >hello: > > in my machine , i gat a new error message,and i cannot ping or connect >it... > this is my errro log.. >" >Sep 14 14:06:35 test1 /kernel: Limiting open port RST response from 358 to >200 p >ackets per second > > " > what`s problem in it?how to tune it > tks ^^ > Somebody tries to flood your network interface with invalid TCP connection attempts. Your kernel honors only 200 per second to prevent a crash. The error message informs you somebody does something out of the ordinary to your network connection. You should try to find out who sends this much RST packets to you, and have their provider shut them off the net. You may call that a denial of service attack. Just my EUR.02 -Christoph Sold To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message