From owner-freebsd-net Wed Dec 13 12:40:56 2000 From owner-freebsd-net@FreeBSD.ORG Wed Dec 13 12:40:55 2000 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from silby.com (cb34181-c.mdsn1.wi.home.com [24.183.3.139]) by hub.freebsd.org (Postfix) with ESMTP id C1A2B37B400 for ; Wed, 13 Dec 2000 12:40:54 -0800 (PST) Received: (qmail 13776 invoked by uid 1000); 13 Dec 2000 20:40:54 -0000 Received: from localhost (sendmail-bs@127.0.0.1) by localhost with SMTP; 13 Dec 2000 20:40:54 -0000 Date: Wed, 13 Dec 2000 14:40:54 -0600 (CST) From: Mike Silbersack To: "Richard A. Steenbergen" Cc: Bosko Milekic , freebsd-net@freebsd.org, green@freebsd.org Subject: Re: Ratelimint Enhancement patch (Please Review One Last Time!) In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Wed, 13 Dec 2000, Richard A. Steenbergen wrote: > > Hm, true. I was thinking of limiting the outgoing side, which would mean > > ipfw comes later in the string, but I suppose that if you limit on the > > incoming ipfw's sooner. > > Historically bandlim has been the process of stopping the processing at > input of things which would result in output... Do you want to (or need > to) extend this? Since this code actually has to read the incoming packets before decidied to not send the outgoing reply, I consider it to be dropping the outgoing. However, since there's no useful info in a icmp request, reading isn't really anything... We appear to be caught in a semantical argument, I'm not proposing anything new. > Same question as above, is this to be built in Denail of Service > prevention, or is this limiting of packets which could potentially > generate excessive processing or replies? Might as well do it right > instead of kludging this up any more... :P It just limits the bandwidth of mostly useless packets. What constitutes a "DoS" is beyond the scope of this message, and we're starting to nitpick. I'll roll an updated patch with less casual messages so we can get it committed soon. Mike "Silby" Silbersack To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message