Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 14 May 2005 09:35:48 +0200
From:      Erik Trulsson <ertr1013@student.uu.se>
To:        "Colin J. Raven" <colin@kenmore.kozy-kabin.nl>
Cc:        FreeBSD Questions <freebsd-questions@freebsd.org>
Subject:   Re: Strange kernel messages
Message-ID:  <20050514073548.GA96049@falcon.midgard.homeip.net>
In-Reply-To: <20050514090844.Q9329@kenmore.kozy-kabin.nl>
References:  <20050514090844.Q9329@kenmore.kozy-kabin.nl>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, May 14, 2005 at 09:14:20AM +0200, Colin J. Raven wrote:
> Hi all!
> I occasionally get these in my daily security run output (which is 
> worrying in itself)
> 
> Limiting closed port RST response from 1629 to 200 packets per second
> 
> the number of these can range from one or two, to sometimes 25 - 30 
> although the latter case is rarer. Usually there's about six or so. 
> These don't arrive every day, usually about once per week on average.
> 
> Is this an OS response to an attempted attack, limiting potential DDOS 
> damage? That's how I'm reading it, but of course I'm guessing. If that 
> *is* so, what mechanism is doing this?
> 
> FreeBSD 4.11 STABLE


See the FAQ:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/faq/networking.html#ICMP-RESPONSE-BW-LIMIT




-- 
<Insert your favourite quote here.>
Erik Trulsson
ertr1013@student.uu.se



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050514073548.GA96049>