Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 26 Jan 2001 11:58:59 +0200
From:      Peter Pentchev <roam@orbitel.bg>
To:        Dennis Rand <dr@incorp.dk>
Cc:        freebsd-security@freebsd.org
Subject:   Re: ICMP attacks
Message-ID:  <20010126115858.B5418@ringworld.oblivion.bg>
In-Reply-To: <3A715799.8EECF43@incorp.dk>; from dr@incorp.dk on Fri, Jan 26, 2001 at 10:55:21AM %2B0000
References:  <NEBBIEGPMLMKDBMMICFNOEHBECAA.mit@mitayai.net> <3A715799.8EECF43@incorp.dk>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Jan 26, 2001 at 10:55:21AM +0000, Dennis Rand wrote:
> I also have this problem but that is when i portscan my computer from another
> host so is there a place or a log where i can check what IP has caused this

You can make your firewall log all denied packets - it's those that cause
ICMP responses, mostly.  I'm not sure logging all denied packets is a good
idea, though, especially if you expect - or even deem it possible - that
you might be attacked.  Trust me, I've had syslogd hog my CPU during
a portscan :)

G'luck,
Peter

-- 
When you are not looking at it, this sentence is in Spanish.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010126115858.B5418>