From owner-freebsd-hackers  Tue Feb  6  3:15:29 2001
Delivered-To: freebsd-hackers@freebsd.org
Received: from salmon.maths.tcd.ie (salmon.maths.tcd.ie [134.226.81.11])
	by hub.freebsd.org (Postfix) with SMTP id 6D99037B4EC
	for <freebsd-hackers@freebsd.org>; Tue,  6 Feb 2001 03:15:12 -0800 (PST)
Date: Tue, 6 Feb 2001 11:15:10 +0000
From: David Malone <dwmalone@maths.tcd.ie>
To: milunovic <milunovic@sendmail.ru>
Cc: freebsd-hackers@freebsd.org
Subject: Re: echo request deny
Message-ID: <20010206111510.A25095@salmon.maths.tcd.ie>
References: <Pine.BSF.4.21.0102061203230.643-100000@scorpion.cosmos.all.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <Pine.BSF.4.21.0102061203230.643-100000@scorpion.cosmos.all.net>; from milunovic@sendmail.ru on Tue, Feb 06, 2001 at 12:05:47PM +0000
Sender: owner-freebsd-hackers@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

On Tue, Feb 06, 2001 at 12:05:47PM +0000, milunovic wrote:
> Is there anyway to deny echo request on FreeBSD (except ipfw add deny
> icmp from any to any) ?
> On Linux It was simple,just echo 1>/proc/.../icmp_echo_request

You can limit the icmp response rate with:

	sysctl -w net.inet.icmp.icmplim=whatever

where 'whatever' is the number of responses to allow in a second.
You can't set it to zero however.

	David.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message