From owner-freebsd-security  Thu Mar 22  9:58:28 2001
Delivered-To: freebsd-security@freebsd.org
Received: from silby.com (adam042-060.resnet.wisc.edu [146.151.42.60])
	by hub.freebsd.org (Postfix) with ESMTP id B4A0E37B725
	for <freebsd-security@FreeBSD.ORG>; Thu, 22 Mar 2001 09:58:22 -0800 (PST)
	(envelope-from silby@silby.com)
Received: (qmail 21921 invoked by uid 1000); 22 Mar 2001 17:58:22 -0000
Received: from localhost (sendmail-bs@127.0.0.1)
  by localhost with SMTP; 22 Mar 2001 17:58:22 -0000
Date: Thu, 22 Mar 2001 11:58:22 -0600 (CST)
From: Mike Silbersack <silby@silby.com>
To: Chris Byrnes <chris@jeah.net>
Cc: <scanner@jurai.net>, Marc Rogers <marcr@shady.org>,
	<freebsd-security@FreeBSD.ORG>
Subject: Re: DoS attack - advice needed
In-Reply-To: <Pine.BSF.4.33.0103221152140.12333-100000@awww.jeah.net>
Message-ID: <Pine.BSF.4.31.0103221156170.21892-100000@achilles.silby.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org


On Thu, 22 Mar 2001, Chris Byrnes wrote:

> > The ratelimiting in 4.3 handles that now, so it's not necessary to block
> > it anymore.  (Though if you're being pung constantly, I can understand the
> > desire to block it.)
>
> Erm.  450mbps in 45 minutes? ;)
>
> We filtered it upstream on the edge routers, because it was killing
> the T1s, obviously.
>
> -Chris

Heh, yeah, that might affect the box, even with ratelimiting of responses. :)

Mike "Silby" Silbersack


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message