Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 16 May 2003 17:46:37 -0700 (PDT)
From:      Tom Samplonius <tom@sdf.com>
To:        Thomas Krause -CI- <freebsd-isp@chef-ingenieur.de>
Cc:        freebsd-isp@freebsd.org
Subject:   Re: router stops working because of udp packets
Message-ID:  <Pine.BSF.4.05.10305161744170.15843-100000@misery.sdf.com>
In-Reply-To: <3EC54FC1.3090104@chef-ingenieur.de>

next in thread | previous in thread | raw e-mail | index | archive | help

On Fri, 16 May 2003, Thomas Krause -CI- wrote:

...
> I belive the host of the customer was hacked. Does anybody know what's
> running on the host? How I can prevent such attacks? There are any
> kernel-options? Or should I limit the udp traffic?

  It is the Slammer worm.  It can easily generate 60Mbps of traffic on a
fast ethernet LAN.  It seems that your router does not have enough
resources to route that much.  Perhaps add more mbufs, and more efficient
network cards.  If using the fxp driver, use the link0 flag to reduce
interupts.

> BTW: 4.6.2-RELEASE-p9 is running on the router.

  You should probably upgrade to 4.8 too.

> Regards,
> Thomas.


Tom



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.05.10305161744170.15843-100000>