Date: Wed, 11 Jul 2001 16:13:45 +0800 From: Kelvin Ng Chee Hoong <nchee_hoong@pacific.net.sg> To: Joseph Gleason <clash@tasam.com> Cc: "freebsd-questions@FreeBSD.ORG" <freebsd-questions@FreeBSD.ORG> Subject: Re: Minimize ICMP packets Message-ID: <3B4C0AB9.8FFC7181@pacific.net.sg> References: <3B4BFCE8.3EE5720@pacific.net.sg> <008801c109d8$eb40e850$0b2d2d0a@battleship>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi Joseph ;
First of all , thank you very much for your information. I've set variable
of icmplim to 30 but this variable seems does not limit the ICMP packet size
to max 30 bytes.
When I did a ping to my FBSD machine with packet size of 18024 bytes, it still
accept the larger ICMP packets rather than to discard .
Joseph Gleason wrote:
> kernel option:
> options ICMP_BANDLIM
>
> Does this. It is default in generic.
>
> I am not certain of this but I assume sysctl variable net.inet.icmp.icmplim
> controls the ammount it lets through. Someone want to confirm or deny this?
>
> Joe Gleason
>
> ----- Original Message -----
> From: "Kelvin Ng Chee Hoong" <nchee_hoong@pacific.net.sg>
> To: <freebsd-questions@FreeBSD.ORG>
> Sent: Wednesday, July 11, 2001 03:14
> Subject: Minimize ICMP packets
>
> > Hi ;
> > I want my FBSD machine to accept ICMP packets (ping) from source
> > anywhere , but limited to number of ICMP packets size and number of
> > connection ping concurrently . Any ICMP packets that beyond the
> > criteria will be discarded .
> >
> >
> > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > with "unsubscribe freebsd-questions" in the body of the message
> >
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3B4C0AB9.8FFC7181>