Date: Mon, 28 Aug 2000 13:26:56 -0500 (CDT) From: Mike Silbersack <silby@silby.com> To: "Col.Panic" <panic@satan.antix.org> Cc: freebsd-security@FreeBSD.ORG Subject: Re: your mail (fwd) Message-ID: <Pine.BSF.4.21.0008281325180.32532-100000@achilles.silby.com> In-Reply-To: <Pine.BSF.4.21.0008281105250.60987-100000@satan.antix.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 28 Aug 2000, Col.Panic wrote: > I have an interesting appendage to add to this answer. I have ICMP shut > down at the router, and I get the same messages from my new 4.1-STABLE > system. I can understand if somebody is spoofing ICMP packets, but if > they are, how are the replies getting to my machine? > > I've looked into it, and there isn't anybody logged into the machine for > when this occurs. I'm at a loss. > > Thanks, > > -Jason "icmp-response" is a misnomer. It counts both icmp unreachables and TCP RST packets. So, UDP to unopen ports, and TCP (non-syn) to unopen ports will cause bandwidth limiting and the resulting console messages. Mike "Silby" Silbersack To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0008281325180.32532-100000>