From owner-freebsd-questions  Tue Jun 24 17:21:19 1997
Return-Path: <owner-questions>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id RAA15726
          for questions-outgoing; Tue, 24 Jun 1997 17:21:19 -0700 (PDT)
Received: (from jmb@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id RAA15717;
          Tue, 24 Jun 1997 17:21:16 -0700 (PDT)
From: "Jonathan M. Bresler" <jmb>
Message-Id: <199706250021.RAA15717@hub.freebsd.org>
Subject: Re: ICMP Flood Ping
To: vince@mail.MCESTATE.COM (Vincent Poy)
Date: Tue, 24 Jun 1997 17:21:16 -0700 (PDT)
Cc: questions@freebsd.org
In-Reply-To: <Pine.BSF.3.95.970624142841.3300Q-100000@mail.MCESTATE.COM> from "Vincent Poy" at Jun 24, 97 02:30:06 pm
X-Mailer: ELM [version 2.4 PL24]
Content-Type: text
Sender: owner-questions@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

Vincent Poy wrote:
> 
> Greetings folks,
> 
> 	Assuming that one can find the source address of the ICMP Flood
> ping coming to the FreeBSD box, is there a way one can kill the ICMP
> request on the receiving FreeBSD box?  Thanks.
> 

	you can reject the host or network that is flooding you
	man route(8) example: 

		route add -net 111.222.333.0 127.0.0.1 -reject

	-blackhole is another option
jmb