From owner-freebsd-isp  Mon May  5 20:23:27 1997
Return-Path: <owner-isp>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id UAA10782
          for isp-outgoing; Mon, 5 May 1997 20:23:27 -0700 (PDT)
Received: from panda.hilink.com.au (panda.hilink.com.au [203.2.144.5])
          by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id UAA10776
          for <freebsd-isp@FreeBSD.ORG>; Mon, 5 May 1997 20:23:18 -0700 (PDT)
Received: (from danny@localhost) by panda.hilink.com.au (8.8.5/8.7.3) id NAA22316; Tue, 6 May 1997 13:25:29 +1000 (EST)
Date: Tue, 6 May 1997 13:25:28 +1000 (EST)
From: "Daniel O'Callaghan" <danny@panda.hilink.com.au>
To: Vincent Poy <vince@mail.MCESTATE.COM>
cc: freebsd-isp@FreeBSD.ORG
Subject: Re: Ping flood atacks
In-Reply-To: <Pine.BSF.3.95.970505192925.1286v-100000@mail.MCESTATE.COM>
Message-ID: <Pine.BSF.3.91.970506132457.4479i-100000@panda.hilink.com.au>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-isp@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk



On Mon, 5 May 1997, Vincent Poy wrote:

> 	What about if we're running a FreeBSD based router using a ET/5025
> Dual ported card and we wanted to filter out only packets larger than a
> certain sized for ICMP ping requests for any ping requests coming in the
> router?

Read the stuff on ipfilter: http://coombs.anu.edu.au/~avalon/

Danny