From owner-freebsd-isp@FreeBSD.ORG Sat May 17 00:38:52 2003 Return-Path: Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id EB32B37B407 for ; Sat, 17 May 2003 00:38:52 -0700 (PDT) Received: from nemesis.webmatic.de (nemesis.webmatic.de [212.78.99.30]) by mx1.FreeBSD.org (Postfix) with ESMTP id 3FAD243FAF for ; Sat, 17 May 2003 00:38:51 -0700 (PDT) (envelope-from freebsd-isp@chef-ingenieur.de) Received: from gateway.private.lan (hll9-d9ba122a.pool.mediaWays.net [217.186.18.42]) by nemesis.webmatic.de (Postfix) with ESMTP id 28FDF40E6D for ; Sat, 17 May 2003 09:38:48 +0200 (CEST) Received: from chef-ingenieur.de (pc-254.private.lan [192.168.1.254]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by gateway.private.lan (Postfix) with ESMTP id 56CDD34D91 for ; Sat, 17 May 2003 09:38:48 +0200 (CEST) Message-ID: <3EC5E7A9.7020802@chef-ingenieur.de> Date: Sat, 17 May 2003 09:41:29 +0200 From: Thomas Krause -CI- User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; de-AT; rv:1.3) Gecko/20030312 X-Accept-Language: de-at, de, en-us, en MIME-Version: 1.0 To: freebsd-isp@freebsd.org References: In-Reply-To: Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: router stops working because of udp packets X-BeenThere: freebsd-isp@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Internet Services Providers List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 17 May 2003 07:38:53 -0000 Thank's to all for your response. I'll question the customer on Monday and probably sell him a firewall. (Should I notice that I hate Microsoft software?) > > It is the Slammer worm. It can easily generate 60Mbps of traffic on a > fast ethernet LAN. It seems that your router does not have enough > resources to route that much. Perhaps add more mbufs, and more efficient > network cards. If using the fxp driver, use the link0 flag to reduce > interupts. There is one fxp and one xl card in that box - but how to use the link0 flag? ( 'man fxp' doesn't help) > > >>BTW: 4.6.2-RELEASE-p9 is running on the router. > > > You should probably upgrade to 4.8 too. Until now 4.6.2 was running very well - and I doubt that 4.8 would forward that traffic. (Anyway, I've a reason to upgrade to 4.7 at least) Regards, Thomas.