Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 5 May 1997 21:54:51 -0700 (PDT)
From:      Vincent Poy <vince@mail.MCESTATE.COM>
To:        Alex Nash <nash@mcs.com>
Cc:        Michael Slater <slaterm@amiga.amitar.com.au>, freebsd-isp@FreeBSD.ORG
Subject:   Re: Ping flood atacks
Message-ID:  <Pine.BSF.3.95.970505215327.1286I-100000@mail.MCESTATE.COM>
In-Reply-To: <336EA384.6201DD56@mcs.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 5 May 1997, Alex Nash wrote:

> Vincent Poy wrote:
> > 
> >         What about if we're running a FreeBSD based router using a ET/5025
> > Dual ported card and we wanted to filter out only packets larger than a
> > certain sized for ICMP ping requests for any ping requests coming in the
> > router?
> 
> ipfw can't filter by packet size.  Are you worried about the ping o'
> death?  FreeBSD is immune.

	Well not actually worried but it did happen a few times before and
our provider being CRL had to like do something on their core router to
stop it and they said it could be done on a Cisco router which is what we
don't have.  


Cheers,
Vince - vince@MCESTATE.COM - vince@GAIANET.NET           ________   __ ____ 
Unix Networking Operations - FreeBSD-Real Unix for Free / / / / |  / |[__  ]
GaiaNet Corporation - M & C Estate                     / / / /  | /  | __] ]  
Beverly Hills, California USA 90210                   / / / / / |/ / | __] ]
HongKong Stars/Gravis UltraSound Mailing Lists Admin /_/_/_/_/|___/|_|[____]





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.95.970505215327.1286I-100000>