From owner-freebsd-security  Wed May 12 17:24:19 1999
Delivered-To: freebsd-security@freebsd.org
Received: from rage.arpa.com (rage.arpa.com [199.245.173.3])
	by hub.freebsd.org (Postfix) with ESMTP
	id 218B914DBF; Wed, 12 May 1999 17:23:45 -0700 (PDT)
	(envelope-from jamie@rage.arpa.com)
Received: (from jamie@localhost)
	by rage.arpa.com (8.9.3/8.9.3) id TAA12987;
	Wed, 12 May 1999 19:14:21 -0500 (CDT)
Date: Wed, 12 May 1999 19:14:21 -0500
From: Jamie Rishaw <jamie@arpa.com>
To: "Jordan K. Hubbard" <jkh@zippy.cdrom.com>
Cc: Mike Smith <mike@smith.net.au>,
	Seth <seth@freebie.dp.ny.frb.org>, freebsd-stable@FreeBSD.ORG,
	security@FreeBSD.ORG, jamie@exodus.net
Subject: Re: FreeBSD 3.1 remote reboot exploit (fwd)
Message-ID: <19990512191420.A12813@rage.arpa.com>
References: <199905040140.SAA01305@dingo.cdrom.com> <30986.925789368@zippy.cdrom.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 0.95.4i
In-Reply-To: <30986.925789368@zippy.cdrom.com>; from Jordan K. Hubbard on Mon, May 03, 1999 at 08:42:48PM -0700
X-No-Archive: Yes
X-Face: d=)
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Problem: FreeBSD kernel panics under SYN attack.

Solution seems to be modifying:

net.inet.ip.rtexpire: 12
net.inet.ip.rtminexpire: 10

Discuss.

-jamie


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message