Date: Mon, 25 Aug 2003 09:51:05 -0400 From: Don Bowman <don@sandvine.com> To: 'User Ernie' <ernie@spooky.eis.net.au>, Don Bowman <don@sandvine.com> Cc: freebsd-isp@freebsd.org Subject: RE: Blocking Virus ICMP flood Message-ID: <FE045D4D9F7AED4CBFF1B3B813C85337027424B8@mail.sandvine.com>
next in thread | raw e-mail | index | archive | help
> From: User Ernie [mailto:ernie@spooky.eis.net.au] > [ Charset ISO-8859-1 unsupported, converting... ] > > > From: User Ernie [mailto:ernie@spooky.eis.net.au] > > > > > > Does anyone know if ipfw can do someting similar to: > > > > > > deny icmp any any echo tos min-delay > > > > > > Which is the Cisco command I use to try and limit the flood > > > style icmp traffic from the > > > recent Internet viruses. > > > > > > - Ernie. > > > > ipfw add deny icmp from any to any icmptypes 0,8 iptos lowdelay > > > I tried that but it gives me the following error: > > ipfw: unknown or out of order argument `iptos'' > > > Does it depend on FreeBSD version? I am running 4.8-STABLE I have IPFW2 option enabled, that may be required.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?FE045D4D9F7AED4CBFF1B3B813C85337027424B8>