Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 17 Oct 2001 12:11:05 -0500 (CDT)
From:      Mike Silbersack <silby@silby.com>
To:        Zhihui Zhang <zzhang@cs.binghamton.edu>
Cc:        <freebsd-hackers@freebsd.org>
Subject:   Re: Limiting closed port RST response
Message-ID:  <20011017120846.H47595-100000@achilles.silby.com>
In-Reply-To: <Pine.SOL.4.21.0110171141520.608-100000@onyx>

next in thread | previous in thread | raw e-mail | index | archive | help

On Wed, 17 Oct 2001, Zhihui Zhang wrote:

>
> I was using FreeBSD a while ago, suddenly a lot of messages show up:
>
> Limiting closed port RST responses from 224 to 200 packets per seconds.
>
> These messages persist even after reboot. What happened? What should I do?
> Thanks!
>
> -Zhihui

Sounds like nmap - it appears to rate limit its portscans to the rate at
which it is receiving replies.  You could lower the icmplim to frustrate
the portscanners more.  (Although if they had any skill you wouldn't be
noticing their scan, so perhaps that doesn't matter.)

Mike "Silby" Silbersack


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011017120846.H47595-100000>