Date: Tue, 12 Feb 2008 13:56:10 +0100 From: Pietro Cerutti <gahr@gahr.ch> To: "Aryeh M. Friedman" <aryeh.friedman@gmail.com> Cc: freebsd-current@freebsd.org Subject: Re: does this error message mean anything bad? Message-ID: <47B1976A.3090705@gahr.ch> In-Reply-To: <47B195EF.9060603@gmail.com> References: <47B195EF.9060603@gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] Aryeh M. Friedman wrote: > Limiting closed port RST response from 266 to 200 packets/second. In the average case, someone is doing a portscan against you. In the worst case, they're trying to do a DOS attack. I suggest that you set the following sysctl variables net.inet.tcp.blackhole=2 net.inet.udp.blackhole=1 and that you read the man page for blackhole(4). P.S. this would better fit on freebsd-questions@ -- Pietro Cerutti PGP Public Key: http://gahr.ch/pgp [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (FreeBSD) iEYEAREKAAYFAkexl28ACgkQwMJqmJVx947xXwCfZqxuON1l5c09Bv4siARBfsak bjEAoNtUDhz1Fsi9aqt4LXoXsxu0fETL =2ODR -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?47B1976A.3090705>