From owner-freebsd-isp  Mon May  5 20:22:05 1997
Return-Path: <owner-isp>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id UAA10742
          for isp-outgoing; Mon, 5 May 1997 20:22:05 -0700 (PDT)
Received: from zen.nash.org (nash.pr.mcs.net [204.95.47.72])
          by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id UAA10735
          for <freebsd-isp@FreeBSD.ORG>; Mon, 5 May 1997 20:21:59 -0700 (PDT)
Received: from zen.nash.org (localhost [127.0.0.1]) by zen.nash.org (8.8.5/8.6.12) with SMTP id WAA07087; Mon, 5 May 1997 22:20:36 -0500 (CDT)
Message-ID: <336EA384.6201DD56@mcs.com>
Date: Mon, 05 May 1997 22:20:36 -0500
From: Alex Nash <nash@mcs.com>
X-Mailer: Mozilla 3.01Gold (X11; I; FreeBSD 3.0-CURRENT i386)
MIME-Version: 1.0
To: Vincent Poy <vince@mail.MCESTATE.COM>
CC: Michael Slater <slaterm@amiga.amitar.com.au>, freebsd-isp@FreeBSD.ORG
Subject: Re: Ping flood atacks
References: <Pine.BSF.3.95.970505192925.1286v-100000@mail.MCESTATE.COM>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-isp@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

Vincent Poy wrote:
> 
>         What about if we're running a FreeBSD based router using a ET/5025
> Dual ported card and we wanted to filter out only packets larger than a
> certain sized for ICMP ping requests for any ping requests coming in the
> router?

ipfw can't filter by packet size.  Are you worried about the ping o'
death?  FreeBSD is immune.

Alex