From owner-freebsd-net  Sun Jul 18  3:39:21 1999
Delivered-To: freebsd-net@freebsd.org
Received: from flood.ping.uio.no (flood.ping.uio.no [129.240.78.31])
	by hub.freebsd.org (Postfix) with ESMTP id 73B2314E8D
	for <net@FreeBSD.ORG>; Sun, 18 Jul 1999 03:39:09 -0700 (PDT)
	(envelope-from des@flood.ping.uio.no)
Received: (from des@localhost)
	by flood.ping.uio.no (8.9.3/8.9.1) id MAA43635;
	Sun, 18 Jul 1999 12:38:39 +0200 (CEST)
	(envelope-from des)
To: Garrett Wollman <wollman@khavrinen.lcs.mit.edu>
Cc: Luigi Rizzo <luigi@labinfo.iet.unipi.it>,
	nagao@iij.ad.jp (NAGAO Tadaaki), net@FreeBSD.ORG
Subject: Re: dummynet -> rate limiting
References: <19990718034115X.nagao@iij.ad.jp> 	<199907171713.TAA16969@labinfo.iet.unipi.it> <199907172241.SAA24085@khavrinen.lcs.mit.edu>
From: Dag-Erling Smorgrav <des@flood.ping.uio.no>
Date: 18 Jul 1999 12:38:39 +0200
In-Reply-To: Garrett Wollman's message of "Sat, 17 Jul 1999 18:41:08 -0400 (EDT)"
Message-ID: <xzpbtdansy8.fsf@flood.ping.uio.no>
Lines: 10
X-Mailer: Gnus v5.5/Emacs 19.34
Sender: owner-freebsd-net@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Garrett Wollman <wollman@khavrinen.lcs.mit.edu> writes:
>                       It may be necessary to protect a part of the
> network with high per-packet costs from an attacker intent on denying
> service from that network or device -- think ping floods.

More to the point, think SYN floods.

DES
-- 
Dag-Erling Smorgrav - des@flood.ping.uio.no


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message