Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 13 Dec 2016 10:43:27 -0500
From:      Michael Butler <imb@protected-networks.net>
To:        Dimitry Andric <dim@FreeBSD.org>
Cc:        FreeBSD Current <freebsd-current@FreeBSD.org>
Subject:   Re: Log spam: Limiting * response from 1 to 200 packets/sec
Message-ID:  <1eb2e94b-c460-8116-8ffc-f7884be644f7@protected-networks.net>
In-Reply-To: <8332C070-E7C8-4CF3-B5DF-2355D9FA20D1@FreeBSD.org>
References:  <630314dc-e14f-02e7-aa48-4456b0feeef9@protected-networks.net> <8332C070-E7C8-4CF3-B5DF-2355D9FA20D1@FreeBSD.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On 12/13/16 10:29, Dimitry Andric wrote:

> Somebody is most likely port scanning your machines.  I see this all the
> time on boxes connected to the internet.

As are mine. I wouldn't mind so much if the message contained sufficient 
useful information that could be acted on, e.g. originating IP address 
and, when appropriate, destination port.

> sysctl net.inet.icmp.icmplim_output=0, or increase the ICMP limit, if
> you want to help the port scanners. :-)

I've added the sysctl to mute the warnings - thanks :-)

	Michael





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1eb2e94b-c460-8116-8ffc-f7884be644f7>