Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 18 Nov 2005 20:05:12 -0600
From:      "Antonio Gandara" <freebsd@triforce.info>
To:        "'Bill Moran'" <wmoran@potentialtech.com>, "'Antonio Gandara'" <antonio@triforce.info>
Cc:        freebsd-questions@freebsd.org
Subject:   RE: RST response in message log?
Message-ID:  <001f01c5ecad$b091f520$8a0010ac@antonioh89t9q9>
In-Reply-To: <43885.162.51.212.16.1132281348.squirrel@www.potentialtech.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Well that makes sense to me. Thanks for all your replies.

Antonio

-----Original Message-----
From: owner-freebsd-questions@freebsd.org
[mailto:owner-freebsd-questions@freebsd.org] On Behalf Of Bill Moran
Sent: Thursday, November 17, 2005 8:36 PM
To: Antonio Gandara
Cc: freebsd-questions@freebsd.org
Subject: Re: RST response in message log?

Antonio Gandara wrote:
> Hi,
>
> Just had a general question as to this message which appeared in the
> message
> log file and dmesg. While I understand it is reducing response to packets,
> I
> am perplexed as to what causes this to happen? I am running 4.11 Release.
>
> Nov 16 11:07:18 eagle /kernel: Limiting closed port RST response from 300
> to
> 200 packets per second

While there are other things that could cause this, it's almost always
indicative of a portscan.

The RSTs are limited to prevent DoS attacks from generating overly huge
amounts of traffic.

-- 
Bill Moran
Potential Technologies
http://www.potentialtech.com
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?001f01c5ecad$b091f520$8a0010ac>