From owner-freebsd-security Thu Mar 22 10: 2:34 2001 Delivered-To: freebsd-security@freebsd.org Received: from borja.sarenet.es (borja.sarenet.es [192.148.167.77]) by hub.freebsd.org (Postfix) with ESMTP id 40FB637B718 for ; Thu, 22 Mar 2001 10:02:29 -0800 (PST) (envelope-from borjamar@sarenet.es) Received: from sarenet.es (localhost [127.0.0.1]) by borja.sarenet.es (8.11.1/8.11.1) with ESMTP id f2MI2Rq81644 for ; Thu, 22 Mar 2001 19:02:28 +0100 (CET) (envelope-from borjamar@sarenet.es) Message-ID: <3ABA3E33.A58E4811@sarenet.es> Date: Thu, 22 Mar 2001 19:02:27 +0100 From: Borja Marcos X-Mailer: Mozilla 4.76 [en] (X11; U; FreeBSD 4.2-STABLE i386) X-Accept-Language: en MIME-Version: 1.0 To: freebsd-security@FreeBSD.ORG Subject: Re: DoS attack - advice needed References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Chris Byrnes wrote: > > > >> type 3 is required for TCP/UDP traffic > > > > CB> Hrm. > > > > I'm sorry. But what means 'Hrm'? It seems I don't know English good > > enough :( > > I think we can move this thread to personal e-mail, because some people > are getting offended that I don't want ICMP traffic. ;-) ICMP filtering is bad for everyone who accesses your website, as it can cause malfunction. One of the typical problems is the "freezing" of the http connections when you are viewing a webpage. The problem? The "ICMP need fragment" messages are not reaching your web server. Borja. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message