From owner-freebsd-security  Wed Nov  1 17: 5:48 2000
Delivered-To: freebsd-security@freebsd.org
Received: from sunny.pacific.net.sg (sunny.pacific.net.sg [203.120.90.127])
	by hub.freebsd.org (Postfix) with ESMTP id 12A0937B4CF
	for <security@FreeBSD.ORG>; Wed,  1 Nov 2000 17:05:43 -0800 (PST)
Received: from pop1.pacific.net.sg (pop1.pacific.net.sg [203.120.90.85])
          by sunny.pacific.net.sg with ESMTP
          id eA215fY16952; Thu, 2 Nov 2000 09:05:41 +0800 (SGT)
Received: from garychang (spoff119.pacific.net.sg [203.120.94.119])
        by pop1.pacific.net.sg with SMTP
        id JAA22071; Thu, 2 Nov 2000 09:05:41 +0800 (SGT)
Message-ID: <001501c04468$c4570a20$775e78cb@garychang>
From: "James Lim" <jameslpin@pacific.net.sg>
To: "Mike Silbersack" <silby@silby.com>
Cc: "Moritz Hardt" <mhardt@morix.de>,
	"Buliwyf McGraw" <buliwyf@libertad.univalle.edu.co>,
	<security@FreeBSD.ORG>
References: <Pine.BSF.4.21.0011011900580.29981-100000@achilles.silby.com>
Subject: Re: Console Message
Date: Thu, 2 Nov 2000 09:03:49 +0800
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Hi all,

            Ok, point taken :)

Regards,
James Lim

----- Original Message -----
From: "Mike Silbersack" <silby@silby.com>
To: "James Lim" <jameslpin@pacific.net.sg>
Cc: "Moritz Hardt" <mhardt@morix.de>; "Buliwyf McGraw"
<buliwyf@libertad.univalle.edu.co>; <security@FreeBSD.ORG>
Sent: Thursday, November 02, 2000 9:01 AM
Subject: Re: Console Message


>
> On Thu, 2 Nov 2000, James Lim wrote:
>
> > Hi,
> >
> >         I suppose you did enable icmp_bandlim in ur kernel which
restricts
> > ICMP traffic to your system. THose error msgs shows that there are in
excess
> > icmp traffic.
> > sysctl -a | grep bandlim
> >
> > You could change the settings to higher using sysctl -w
> >
> > Regards,
> > James Lim
>
> There's little reason to raise the limit.  Most likely he was seeing the
> rate limiting of RST packets caused by an nmap of his box.  If he raises
> the limit, nmap will just scan faster next time.
>
> Mike "Silby" Silbersack
>
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
>



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message