From owner-freebsd-questions  Wed Jul 11  1:11:22 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from seed.pacific.net.sg (seed.pacific.net.sg [203.120.90.77])
	by hub.freebsd.org (Postfix) with ESMTP id 8FDC737B408
	for <freebsd-questions@FreeBSD.ORG>; Wed, 11 Jul 2001 01:11:17 -0700 (PDT)
	(envelope-from nchee_hoong@pacific.net.sg)
Received: from pop2.pacific.net.sg (pop2.pacific.net.sg [203.120.90.86])
          by seed.pacific.net.sg with ESMTP
          id f6B8BEY16217; Wed, 11 Jul 2001 16:11:15 +0800 (SGT)
Received: from pacific.net.sg ([203.208.143.50])
        by pop2.pacific.net.sg with ESMTP
        id QAA19631; Wed, 11 Jul 2001 16:11:14 +0800 (SGT)
Message-ID: <3B4C0B79.E91DA46C@pacific.net.sg>
Date: Wed, 11 Jul 2001 16:16:57 +0800
From: Kelvin Ng Chee Hoong <nchee_hoong@pacific.net.sg>
X-Mailer: Mozilla 4.77 [en] (WinNT; U)
X-Accept-Language: zh-TW,en
MIME-Version: 1.0
To: Joseph Gleason <clash@tasam.com>
Cc: freebsd-questions@FreeBSD.ORG
Subject: Re: Minimize ICMP packets
References: <3B4BFCE8.3EE5720@pacific.net.sg> <008801c109d8$eb40e850$0b2d2d0a@battleship> <3B4C0AB9.8FFC7181@pacific.net.sg> <001b01c109e0$dda90350$0b2d2d0a@battleship>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

You are right .

Joseph Gleason wrote:

> Humm...I beleive net.inet.icmp.icmplim is to limit the rate in packets per
> second of ICMP not the size.  I'm not sure how to limit the size....
>
> ----- Original Message -----
> From: "Kelvin Ng Chee Hoong" <nchee_hoong@pacific.net.sg>
> To: "Joseph Gleason" <clash@tasam.com>
> Cc: <freebsd-questions@FreeBSD.ORG>
> Sent: Wednesday, July 11, 2001 04:13
> Subject: Re: Minimize ICMP packets
>
> > Hi Joseph ;
> >     First of all , thank you very much for your information. I've set
> variable
> > of  icmplim to 30 but this variable  seems does not limit the ICMP packet
> size
> > to max 30 bytes.
> > When I did a ping to my FBSD machine with  packet size of 18024 bytes, it
> still
> > accept the larger ICMP packets rather than to discard .
> >
> > Joseph Gleason wrote:
> >
> > > kernel option:
> > > options         ICMP_BANDLIM
> > >
> > > Does this.  It is default in generic.
> > >
> > > I am not certain of this but I assume sysctl variable
> net.inet.icmp.icmplim
> > > controls the ammount it lets through.  Someone want to confirm or deny
> this?
> > >
> > > Joe Gleason
> > >
> > > ----- Original Message -----
> > > From: "Kelvin Ng Chee Hoong" <nchee_hoong@pacific.net.sg>
> > > To: <freebsd-questions@FreeBSD.ORG>
> > > Sent: Wednesday, July 11, 2001 03:14
> > > Subject: Minimize ICMP packets
> > >
> > > > Hi ;
> > > >     I want my FBSD machine to accept ICMP packets (ping)  from source
> > > > anywhere , but limited to number of ICMP packets size and number of
> > > > connection ping concurrently .  Any ICMP packets that beyond the
> > > > criteria will be discarded .
> > > >
> > > >
> > > > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > > > with "unsubscribe freebsd-questions" in the body of the message
> > > >
> >


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message