Date: Tue, 1 Dec 1998 12:17:48 -0600 (CST) From: "Open Systems Inc." <opsys@open-systems.net> To: Karl Denninger <karl@Denninger.Net> Cc: John Saunders <john.saunders@scitec.com.au>, Matthew Dillon <dillon@apollo.backplane.com>, freebsd-current@FreeBSD.ORG Subject: Re: D.O.S. attack protection enhancements commit (ICMP_BANDLIM) Message-ID: <Pine.BSF.3.96.981201121332.18861A-100000@pinkfloyd.open-systems.net> In-Reply-To: <19981201100633.A55743@Denninger.Net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 1 Dec 1998, Karl Denninger wrote:
> That's not true.
>
> While under attack, a system will consume *outrageous* numbers of buffers.
> There is no reason to "size" for such events; the fix is as Matt described,
> in that there is no reason for the system to make available resources that
> cannot be *productively* consumed.
I knew someone was gonna say something. :-)
I meant to specifically answer his comment about heavy load not a DoS.
Although a DoS *will* generate a large load as you state I was merely
trying to answer his specific question of large load not a DoS making FBSD
fall over.
Chris
"If you aim the gun at your foot and pull the trigger, it's UNIX's job to
ensure reliable delivery of the bullet to where you aimed the gun (in
this case, Mr. Foot)." -- Terry Lambert, FreeBSD-Hackers mailing list.
===================================| Open Systems FreeBSD Consulting.
FreeBSD 2.2.7 is available now! | Phone: 402-573-9124
-----------------------------------| 3335 N. 103 Plaza #14, Omaha, NE 68134
FreeBSD: The power to serve! | E-Mail: opsys@open-systems.net
http://www.freebsd.org | Consulting, Network Engineering, Security
===================================| http://open-systems.net
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: 2.6.2
mQENAzPemUsAAAEH/06iF0BU8pMtdLJrxp/lLk3vg9QJCHajsd25gYtR8X1Px1Te
gWU0C4EwMh4seDIgK9bzFmjjlZOEgS9zEgia28xDgeluQjuuMyUFJ58MzRlC2ONC
foYIZsFyIqdjEOCBdfhH5bmgB5/+L5bjDK6lNdqD8OAhtC4Xnc1UxAKq3oUgVD/Z
d5UJXU2xm+f08WwGZIUcbGcaonRC/6Z/5o8YpLVBpcFeLtKW5WwGhEMxl9WDZ3Kb
NZH6bx15WiB2Q/gZQib3ZXhe1xEgRP+p6BnvF364I/To9kMduHpJKU97PH3dU7Mv
CXk2NG3rtOgLTEwLyvtBPqLnbx35E0JnZc0k5YkABRO0JU9wZW4gU3lzdGVtcyA8
b3BzeXNAb3Blbi1zeXN0ZW1zLm5ldD4=
=BBjp
-----END PGP PUBLIC KEY BLOCK-----
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.96.981201121332.18861A-100000>