From owner-freebsd-questions Sat Jan 27 8:51:56 2001 Delivered-To: freebsd-questions@freebsd.org Received: from plus.postech.ac.kr (plus.postech.ac.kr [141.223.175.203]) by hub.freebsd.org (Postfix) with ESMTP id 7A82737B400 for ; Sat, 27 Jan 2001 08:51:38 -0800 (PST) Received: (from skyul@localhost) by plus.postech.ac.kr (8.11.1/8.11.1/Debian 8.11.0-6) id f0RGkXP01741 for freebsd-questions@freebsd.org; Sun, 28 Jan 2001 01:46:33 +0900 Date: Sun, 28 Jan 2001 01:46:33 +0900 From: Kwangyul Seo To: freebsd-questions Subject: Re: ICMP attacks Message-ID: <20010128014633.A1727@plus.or.kr> References: <20010127170042.A737@basildon.homerun> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="sm4nu43k4a2Rpi4c" Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20010127170042.A737@basildon.homerun>; from tmseck@web.de on Sat, Jan 27, 2001 at 05:00:42PM +0100 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG --sm4nu43k4a2Rpi4c Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Fr , Jan 26, 2001 at 04:44:51am -0500, Will Mitayai Keeso Rowe wrote: > > icmp-response bandwidth limit 205/200 pps > > icmp-response bandwidth limit 264/200 pps > > icmp-response bandwidth limit 269/200 pps > > icmp-response bandwidth limit 273/200 pps > > icmp-response bandwidth limit 273/200 pps > > icmp-response bandwidth limit 271/200 pps > > icmp-response bandwidth limit 261/200 pps > > icmp-response bandwidth limit 268/200 pps > > icmp-response bandwidth limit 205/200 pps > > icmp-response bandwidth limit 223/200 pps > > Is there any way to trace the people that are causing this? It's becoming a > daily occurance and it's beginning to irritate me. You can also use ipfw to detect who is scanning you. # ipfw add deny log icmp from any to any icmptypes 3 icmptypes 3 means "destination unreachable" which contains "port unreachable". for more info, man ipfw. -- Kwangyul Seo My Gnupg key is available at http://skyul.plus.or.kr/skyul.gpg --sm4nu43k4a2Rpi4c Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (GNU/Linux) Comment: For info see http://www.gnupg.org iD4DBQE6cvtpqUpO7he7BaERAoc1AKCU2lfNVXWauga92aQHleO4WL1CLgCY6IeG OyzrNcexSY7N1oZUZvvn3Q== =6xWK -----END PGP SIGNATURE----- --sm4nu43k4a2Rpi4c-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message