From owner-freebsd-current Tue Dec 1 15:35:21 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id PAA03894 for freebsd-current-outgoing; Tue, 1 Dec 1998 15:35:21 -0800 (PST) (envelope-from owner-freebsd-current@FreeBSD.ORG) Received: from dingo.cdrom.com (ppp10.portal.net.au [202.12.71.110]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id PAA03882 for ; Tue, 1 Dec 1998 15:35:15 -0800 (PST) (envelope-from mike@dingo.cdrom.com) Received: from dingo.cdrom.com (localhost [127.0.0.1]) by dingo.cdrom.com (8.9.1/8.8.8) with ESMTP id PAA00825; Tue, 1 Dec 1998 15:33:02 -0800 (PST) (envelope-from mike@dingo.cdrom.com) Message-Id: <199812012333.PAA00825@dingo.cdrom.com> X-Mailer: exmh version 2.0.2 2/24/98 To: Matthew Dillon cc: David Greenman , freebsd-current@FreeBSD.ORG Subject: Re: D.O.S. attack protection enhancements commit (ICMP_BANDLIM) In-reply-to: Your message of "Mon, 30 Nov 1998 23:26:26 PST." <199812010726.XAA03791@apollo.backplane.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Tue, 01 Dec 1998 15:32:59 -0800 From: Mike Smith Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > :general scheme implemented perhaps inside the ipfw framework would be more > :appropriate. I also generally like to avoid compile time options for things > :like this, but I"m sympathetic for performance reducing enhancements. > : > :-DG > > I figure we would make it the default in 6 months to a year, but > we should have it optioned initially so people can play with it > and also because it defaults to enabled when optioned-in, which I > think is important. Just a consideration; if possible, make it run-time tunable with a boolean sysctl variable. (ie. if the 'off' case is comparable to the 'optioned-out' case in terms of speed.) -- \\ Sometimes you're ahead, \\ Mike Smith \\ sometimes you're behind. \\ mike@smith.net.au \\ The race is long, and in the \\ msmith@freebsd.org \\ end it's only with yourself. \\ msmith@cdrom.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message