From owner-freebsd-security  Wed Nov  1 17: 1:53 2000
Delivered-To: freebsd-security@freebsd.org
Received: from silby.com (cb34181-c.mdsn1.wi.home.com [24.183.3.139])
	by hub.freebsd.org (Postfix) with ESMTP id B180B37B4CF
	for <security@FreeBSD.ORG>; Wed,  1 Nov 2000 17:01:49 -0800 (PST)
Received: (qmail 30085 invoked by uid 1000); 2 Nov 2000 01:01:48 -0000
Received: from localhost (sendmail-bs@127.0.0.1)
  by localhost with SMTP; 2 Nov 2000 01:01:48 -0000
Date: Wed, 1 Nov 2000 19:01:48 -0600 (CST)
From: Mike Silbersack <silby@silby.com>
To: James Lim <jameslpin@pacific.net.sg>
Cc: Moritz Hardt <mhardt@morix.de>,
	Buliwyf McGraw <buliwyf@libertad.univalle.edu.co>,
	security@FreeBSD.ORG
Subject: Re: Console Message
In-Reply-To: <000501c04466$e20b05a0$775e78cb@garychang>
Message-ID: <Pine.BSF.4.21.0011011900580.29981-100000@achilles.silby.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org


On Thu, 2 Nov 2000, James Lim wrote:

> Hi,
> 
>         I suppose you did enable icmp_bandlim in ur kernel which restricts
> ICMP traffic to your system. THose error msgs shows that there are in excess
> icmp traffic.
> sysctl -a | grep bandlim
> 
> You could change the settings to higher using sysctl -w
> 
> Regards,
> James Lim

There's little reason to raise the limit.  Most likely he was seeing the
rate limiting of RST packets caused by an nmap of his box.  If he raises
the limit, nmap will just scan faster next time.

Mike "Silby" Silbersack



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message