Date: Wed, 8 Dec 1999 16:26:13 +0100 From: Martin Cracauer <cracauer@cons.org> To: Jonas Eriksson <je@interact.se> Cc: retal <retal@ns.navon.org.il>, freebsd-security@FreeBSD.ORG Subject: Re: Attacked By ICMP Packets Message-ID: <19991208162613.A78075@cons.org> In-Reply-To: <owner-freebsd-securityATFreeBSD.ORG--Pine.BSF.4.10.9912081348100.95063-100000@wolfie.interact.se>; from Jonas Eriksson on Wed, Dec 08, 1999 at 02:30:19PM %2B0100 References: <Pine.BSF.4.20.9912081416240.347-100000@ns.navon.org.il> <owner-freebsd-securityATFreeBSD.ORG--Pine.BSF.4.10.9912081348100.95063-100000@wolfie.interact.se>
next in thread | previous in thread | raw e-mail | index | archive | help
In <owner-freebsd-securityATFreeBSD.ORG--Pine.BSF.4.10.9912081348100.95063-100000@wolfie.interact.se>, Jonas Eriksson wrote: > On Wed, 8 Dec 1999, retal wrote: > > > Hi there, > > I'm getting icmped and smurfed twice a week and when it does happen > > My LAN is dead ... , i ran a firewall but still it doesnt help... > > any suggestions? > > > > Contact your provider, and let them block icmp to your net. Aehm, you need some ICMP, i.e. MTU discovery. The usual attack packets are oversized ping packets. You may let them filter on that criterium. Martin -- %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% Martin Cracauer <cracauer@bik-gmbh.de> http://www.bik-gmbh.de/~cracauer/ "Where do you want to do today?" Hard to tell running your calendar program on a junk operating system, eh? To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19991208162613.A78075>