From owner-freebsd-current Sat Dec 5 01:14:40 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id BAA22396 for freebsd-current-outgoing; Sat, 5 Dec 1998 01:14:40 -0800 (PST) (envelope-from owner-freebsd-current@FreeBSD.ORG) Received: from norquay.tor.shaw.wave.ca (mail.tor.shaw.wave.ca [24.64.63.48]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id BAA22390 for ; Sat, 5 Dec 1998 01:14:38 -0800 (PST) (envelope-from pc@shaw.wave.ca) Received: from cs929626-a.mtmc1.on.wave.home.com ([24.64.174.71]) by norquay.tor.shaw.wave.ca (Netscape Messaging Server 3.0) with SMTP id AAA28034; Sat, 5 Dec 1998 04:15:39 -0500 From: "C. Peter Constantinidis" To: Matthew Dillon Cc: freebsd-current@FreeBSD.ORG Subject: Re: D.O.S. attack protection enhancements commit (ICMP_BANDLIM) Date: Sat, 05 Dec 1998 09:14:21 GMT Message-ID: <3668f84f.12730770@mail.tor.shaw.wave.ca> References: <199812010607.WAA03051@apollo.backplane.com> In-Reply-To: <199812010607.WAA03051@apollo.backplane.com> X-Mailer: Forte Agent 1.5/32.451 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by hub.freebsd.org id BAA22391 Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Hi.. I don't know if you've committed this yet or not. But from what I can tell you from personal experience, being threatened with smurfs on irc, etc. As well as knowing many linux script kiddiez that just foam at the mouth to find some, any, loophole that can be used to screw things up.. If your proposal makes things safer, then it should go in. This is part of the reason that I lean towards FreeBSD rather than Linux.. it's not as widely popular or 'known'.. so the attacks for it are not as numerous.. if the kiddiez knew all one had to do was overload the mbuf, then they would do it daily. (And of course, the FreeBSD community doesn't seem composed of children.) So yeah, I like the sounds of a rate limiting feature by default. P. -- pc@shaw.wave.ca DSS/D-H: 0x81F1BC09 DFD1 D149 40BD 8139 05D5 D8FA 2BA4 E143 81F1 BC09 RSA: 0x6DC376E5 0AE1 0FB7 A43A 0818 3EC4 F2DD 1458 EFCE To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message