From owner-freebsd-security Tue Jan 18 18:58:26 2000 Delivered-To: freebsd-security@freebsd.org Received: from mx2.x-treme.gr (mx2.x-treme.gr [212.120.192.15]) by hub.freebsd.org (Postfix) with ESMTP id AB08F14BC9 for ; Tue, 18 Jan 2000 18:58:21 -0800 (PST) (envelope-from keramida@diogenis.ceid.upatras.gr) Received: from hades.hell.gr (pat44.x-treme.gr [212.120.197.236]) by mx2.x-treme.gr (8.9.3/8.9.3/IPNG-ADV-ANTISPAM-0.1) with ESMTP id DAA22467; Wed, 19 Jan 2000 03:59:00 +0200 Received: (from charon@localhost) by hades.hell.gr (8.9.3/8.9.3) id DAA57792; Wed, 19 Jan 2000 03:07:19 +0200 (EET) (envelope-from keramida@diogenis.ceid.upatras.gr) Date: Wed, 19 Jan 2000 03:07:19 +0200 From: Giorgos Keramidas To: matt Cc: freebsd-security@FreeBSD.ORG Subject: Re: TCP/IP Message-ID: <20000119030719.A57767@hades.hell.gr> Reply-To: keramida@ceid.upatras.gr References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0pre3i In-Reply-To: X-PGP-Fingerprint: 62 45 D1 C9 26 F9 95 06 D6 21 2A C8 8C 16 C0 8E Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Tue, Jan 18, 2000 at 12:53:12PM -0500, matt wrote: | | I would love to talk my uplink (uunet.ca) into filtering certain things | before they pass it on to my router, wish they would =/ Besides that, I | filter syn,fin, icmp, all udp except ntp/dns, besides that, I don't think | there is much that I can do. Amen for uplink filtering. I've been getting on a dialup link with a 28.8 modem packets like: tun0 @0:2 b 212.120.196.238 -> 224.0.0.13 PR pim len 20 (30) tun0 @0:2 b 212.120.196.238 -> 224.0.0.1 PR igmp len 20 (28) and i know for sure that no multicast channels have been joined by my machine ;) My ipfilter has done an excellent job dropping all these, but I still think it's wasted bandwidth. They seem to come every 30 secs or so! Ahem... -- Giorgos Keramidas, < keramida @ ceid . upatras . gr > "Don't let your schooling interfere with your education." [??] To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message