From owner-freebsd-stable Thu Jan 27 6:13:23 2000 Delivered-To: freebsd-stable@freebsd.org Received: from smtppzh.pzh.nl (webshield.pzh.nl [194.178.168.50]) by hub.freebsd.org (Postfix) with SMTP id 9F2F115086 for ; Thu, 27 Jan 2000 06:13:08 -0800 (PST) (envelope-from MULHUIJZEN@PZH.NL) Received: FROM smtp.pzh.nl BY smtppzh.pzh.nl ; Thu Jan 27 15:11:29 2000 0000 Received: from PZH40-1-Message_Server by smtp.pzh.nl with Novell_GroupWise; Thu, 27 Jan 2000 15:11:35 +0100 Message-Id: X-Mailer: Novell GroupWise 5.5.2 Date: Thu, 27 Jan 2000 15:11:02 +0100 From: "ROGIER MULHUIJZEN" To: , Cc: Subject: Re: icmp-response bandwidth limit 103/100 pps Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Disposition: inline Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG >remove the line: >options ICMP_BANDLIM Might be a bit drastic. You could use sysctl -w net.inet.icmp.icmplim=0 to disable. Or try 200 and see how you fare (since you get just over 100 packets per sec). BUT the fact that you have that message means you have a rather high number of ICMP packets going out. You might want to leave the icmp-bandwidth setting and investigate. Or even lower it to 1 to make things really slow for any scanners. Use tcpdump ip proto icmp to see what icmp packets are flying across the wire. Good luck, DocWilco To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message