From owner-freebsd-stable  Thu Jan 27  8:56:48 2000
Delivered-To: freebsd-stable@freebsd.org
Received: from alpha.dgweb.com (alpha.dgweb.com [207.218.73.252])
	by hub.freebsd.org (Postfix) with ESMTP id 159CC157E1
	for <freebsd-stable@FreeBSD.ORG>; Thu, 27 Jan 2000 08:56:46 -0800 (PST)
	(envelope-from kuzak@kuzak.net)
Received: from kuzak (killer@sac1-44.dgweb.com [207.218.73.44])
	by alpha.dgweb.com (8.10.0.Beta10/8.10.0Beta10) with SMTP id e0RGugR53381
	for <freebsd-stable@FreeBSD.ORG>; Thu, 27 Jan 2000 08:56:43 -0800 (PST)
Message-Id: <200001271656.e0RGugR53381@alpha.dgweb.com>
X-Sender: kuzak@mail.kuzak.net (Unverified)
X-Mailer: QUALCOMM Windows Eudora Pro Version 4.0
Date: Thu, 27 Jan 2000 08:47:49 -0800
To: freebsd-stable@FreeBSD.ORG
From: Kuzak <kuzak@kuzak.net>
Subject: Odd DoS
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Sender: owner-freebsd-stable@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

I upgraded this server to 3.4-STABLE about a week ago after
a long run with 3.2.. Last night it seems to have spontaniously
started coughing up this error.  The error seems to coinside
exactly with a large incoming DoS attack that his right at
16:00.  The attack appears all incoming, so I suspect not
stream.c or a variant... If anyone knows what this is please
let me know so I can try to stop it from happening again.  In
the end the server remained offline until I could get it rebooted.

Jan 26 16:05:47 ai /kernel: arplookup 205.134.161.2 failed: host is not on
local network
Jan 26 16:06:24 ai /kernel: arplookup 205.134.161.2 failed: host is not on
local network
Jan 26 16:08:22 ai /kernel: arplookup 205.134.161.2 failed: host is not on
local network
Jan 26 16:09:05 ai last message repeated 91 times
Jan 26 16:12:00 ai last message repeated 4 times

( this msg repeats until rebooted )... 


Also I am interested in compiling ICMP_BANDLIM into
the kernel.. to make it work is there anything beyond adding
it to the kernel that need be done, such as adding something
to the rc.conf?
	-Aric


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message