From owner-freebsd-security Thu May 31 15: 2:16 2001 Delivered-To: freebsd-security@freebsd.org Received: from smtp.pace.edu (ntutil.pace.edu [205.232.111.9]) by hub.freebsd.org (Postfix) with ESMTP id 82B1937B424 for ; Thu, 31 May 2001 15:02:11 -0700 (PDT) (envelope-from js43064n@stmail.pace.edu) Received: from stmail.pace.edu (205.232.111.7:4767) by smtp.pace.edu (LSMTP for Windows NT v1.1b) with SMTP id <0.A89A86D5@smtp.pace.edu>; Thu, 31 May 2001 18:02:11 -0400 Date: Thu, 31 May 2001 18:02:10 -0400 Message-Id: <200105311802.AA37290334@stmail.pace.edu> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii From: "Jonathan Slivko" Reply-To: To: "Liran Dahan" , "Kyle Crane" Cc: Subject: Re: ICMP Killed me and my machine X-Mailer: Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Exactly :) -- Jonathan M. Slivko ----------------------------------------- Jonathan M. Slivko Network Admin., DataSyrge Internet Svces. Server Co-Admin., AsylumNet IRC Networks web: http://webpage.pace.edu/js43064n/ voice: (212) 696-6774 (24 Hours) ----------------------------------------- ---------- Original Message ---------------------------------- From: "Kyle Crane" Date: Thu, 31 May 2001 16:44:19 -0500 >Niether your limiting or IPFW will fix the problem with your bandwidth being >eaten by the attack. The only way to cut it off is at the ISP level. Your >filter will certainly block the packets at your machine (network card), but >it wont stop the flood. It will only inflate your lifevest. > > >----- Original Message ----- >From: "Liran Dahan" >To: >Sent: Thursday, May 31, 2001 5:24 PM >Subject: Re: ICMP Killed me and my machine > > >> But i have my own filtering rules :) >> You mean... its my ISP's fault? even my ICMP bandwidth limited and my IPFW >> cant help? >> >> ----- Original Message ----- >> From: "Jonathan Slivko" >> To: ; "Liran Dahan" > >> Sent: Thursday, May 31, 2001 11:20 PM >> Subject: Re: ICMP Killed me and my machine >> >> >> > Time to call your ISP and get some filtering rules in place :) >> > -- Jonathan >> > >> > ----------------------------------------- >> > Jonathan M. Slivko >> > Network Admin., DataSyrge Internet Svces. >> > Server Co-Admin., AsylumNet IRC Networks >> > >> > web: http://webpage.pace.edu/js43064n/ >> > voice: (212) 696-6774 (24 Hours) >> > ----------------------------------------- >> > >> > >> > >> > ---------- Original Message ---------------------------------- >> > From: "Liran Dahan" >> > Date: Fri, 1 Jun 2001 00:14:45 +0200 >> > >> > >My machines are being attacked over hours and those are the only >> > messages i found: >> > >Jun 1 00:07:30 freebsd /kernel: Limiting icmp unreach response >> > from 710 to 20 packets per second >> > >Jun 1 00:05:49 freebsd /kernel: Limiting icmp unreach response >> > from 1092 to 20 packets per second >> > >i tonoz of messages like that... >> > > >> > >I Had Orange light ON - TRAF on my hub >> > >But i was down including all my machines.. >> > > >> > >-Liran Dahan- (lirandb@netvision.net.il) >> > > >> > > >> > >> > >> > ___________________________________________________________________ >> > ___ >> > Sent via the Pace University Mail system at stmail.pace.edu >> > >> > >> > >> > >> > >> > To Unsubscribe: send mail to majordomo@FreeBSD.org >> > with "unsubscribe freebsd-security" in the body of the message >> > >> >> >> To Unsubscribe: send mail to majordomo@FreeBSD.org >> with "unsubscribe freebsd-security" in the body of the message >> > > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-security" in the body of the message > ___________________________________________________________________ ___ Sent via the Pace University Mail system at stmail.pace.edu To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message