Date: Thu, 16 Dec 1999 23:22:08 -0800 From: "FreeBSD" <freebsd@gtonet.net> To: "freebsd-security@FreeBSD. ORG" <freebsd-security@FreeBSD.ORG> Subject: RE: Attacked By ICMP Packets Message-ID: <NCBBILEECKNKMONCIAIOCEOPCEAA.freebsd@gtonet.net> In-Reply-To: <NDBBJDFPGLMLFHLNEEOMOEEEDDAA.usebsd@free.fr>
next in thread | previous in thread | raw e-mail | index | archive | help
Depending on the attack you might not be able to stop it even if you filter the packets. If the attacker can send more packets than your bandwidth can handle, for example. No matter how fast you drop them, they still exceed your bandwidth, thus you die. Avoiding IRC will reduce your smurfs usually or you can just avoid pissing people off or channels that are prone to attacks. FreeBSD freebsd@gtonet.net "LinSUX is only free if your time is worthless" > -----Original Message----- > From: owner-freebsd-security@FreeBSD.ORG > [mailto:owner-freebsd-security@FreeBSD.ORG]On Behalf Of BSDman > Sent: Thursday, December 16, 1999 6:40 AM > To: retal; freebsd-security@FreeBSD.ORG > Subject: RE: Attacked By ICMP Packets > > > > I'm getting icmped and smurfed twice a week and when it does happen > > My LAN is dead ... , i ran a firewall but still it doesnt help... > > any suggestions? > > what firewall are you running? on top of which OS? > why is your LAN dead? do you allow inbound icmp packets to pass > accross your firewall? generally, you should only allow icmp > packets to the > firewall > (unless you have public addresses in your LAN and you do not NAT > them at the > firewall). > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?NCBBILEECKNKMONCIAIOCEOPCEAA.freebsd>