From owner-freebsd-questions Mon Jun 19 1:32:40 2000 Delivered-To: freebsd-questions@freebsd.org Received: from draenor.org (draenor.org [196.36.119.129]) by hub.freebsd.org (Postfix) with ESMTP id E2EFC37BAB0 for ; Mon, 19 Jun 2000 01:32:34 -0700 (PDT) (envelope-from marcs@draenor.org) Received: from marcs by draenor.org with local (Exim 3.14 #1) id 133wxL-0007M6-00; Mon, 19 Jun 2000 10:30:55 +0200 Date: Mon, 19 Jun 2000 10:30:55 +0200 From: Marc Silver To: Sarton O'Brien Cc: "freebsd-questions@FreeBSD.ORG" Subject: Re: Is my bandwidth limited somehow? Message-ID: <20000619103055.D26533@draenor.org> References: <394DB86A.C5603C9F@quicksilver.co.nz> <20000619081617.A26533@draenor.org> <394DC0B5.2A4F880D@quicksilver.co.nz> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2i In-Reply-To: <394DC0B5.2A4F880D@quicksilver.co.nz>; from sobrien@quicksilver.co.nz on Mon, Jun 19, 2000 at 06:41:57PM +1200 X-Operating-System: FreeBSD 4.0-STABLE Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Mon, Jun 19, 2000 at 06:41:57PM +1200, Sarton O'Brien wrote: > Thanks, just a couple of quick questions, I'm not entirely sure I know > what this is is for. The server is firewalled except for 3 ports, 2 used > for game connections and 1 for http. Would removing this really pose > much of a threat. ICMP can be a dangerous protocol when it comes to DoS attacks. You _could_ remove it, but then I would make sure that your firewall is limiting ICMP fragments/bad packets before they reach your game server. > If this is suppose to limit bad replies, would it effect the way the > server operates? I don't care about the console spam .... I only log in > as a user remotely anyway. I have noticed that trying to connect > externally can _sometimes_ take for ever ... if it connects at all, but > connecting on the internal network is no problem. > > Basically I guess what I'm asking is, can this limiter be a nusiance in > some circumstances and would removing it prove anything. It _can_ be a nuisance yes. It's basically there for your protection, but as with anything in BSD, you can change it. :) You could give it a shot. Who knows, perhaps you'll see better performance without it. :) Cheers, Marc To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message