Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 18 Jun 2000 15:07:00 -0700 (PDT)
From:      "J. Goodleaf" <goodleaf@goodleaf.net>
To:        Chris Angell <chris@snark.wizard.com>
Cc:        questions@FreeBSD.ORG
Subject:   Re: TCP question
Message-ID:  <Pine.BSF.4.21.0006181501150.18022-100000@clyde.goodleaf.net>
In-Reply-To: <Pine.BSF.4.21.0006181420200.41427-100000@snark.wizard.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Well, I can tell you what's causing it, but I'll defer to more
knowledgeable people on what you ought to do about it. You have "options
ICMP_BANDLIM compiled into your kernel. It's purpose, as I understand it,
is to limit replies to ICMP errors. Basically, it should help protect you
from denial of service attacks. Perhaps, instead of recompiling without
it, you could configure it to a different threshhold. I don't know without
looking if that's possible. Check the FAQs and read the relevant part of
the /sys/i386/conf/LINT file. But I'd have to wonder what's happening on
your network connection that's causing the ICMP bandlim to be invoked...
-J

===============================
John Goodleaf
goodleaf@goodleaf.net

PGP key: finger goodleaf@goodleaf.net
===============================

On Sun, 18 Jun 2000, Chris Angell wrote:

>  Las Vegas NV  89146        |  1-702-317-2001
>  1-800-851-4161		    |  Fax 702-317-2057 
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> 
> ---------- Forwarded message ----------
> Date: Sun, 18 Jun 2000 14:15:31 -0700 (PDT)
> From: Mail Delivery Subsystem <MAILER-DAEMON>
> To: chris@snark.wizard.com
> Subject: Returned mail: Host unknown (Name server: freebsd.com: no data
>     known)
> 
> The original message was received at Sun, 18 Jun 2000 14:15:31 -0700 (PDT)
> from chris@localhost
> 
>    ----- The following addresses had permanent fatal errors -----
> <questions@freebsd.com>
> 
>    ----- Transcript of session follows -----
> 550 <questions@freebsd.com>... Host unknown (Name server: freebsd.com: no data known)
> 
>    ----- Original message follows -----
> 
> Return-Path: <chris@snark.wizard.com>
> Received: from localhost (chris@localhost)
> 	by snark.wizard.com (8.9.3/8.9.3) with ESMTP id OAA37652
> 	for <questions@freebsd.com>; Sun, 18 Jun 2000 14:15:31 -0700 (PDT)
> Date: Sun, 18 Jun 2000 14:15:31 -0700 (PDT)
> From: Chris Angell <chris@snark.wizard.com>
> To: questions@freebsd.com
> Subject: TCP Question
> Message-ID: <Pine.BSF.4.21.0006181409140.32392-100000@snark.wizard.com>
> MIME-Version: 1.0
> Content-Type: TEXT/PLAIN; charset=US-ASCII
> 
> Forgive me for bothering you with this question.
> 
> Sometimes I get the message 'chris /kernel: icmp-response bandwidth limit
> 201/200 pps'
> 
> 'chris' is my computer name.  I am running version 4.0-20000307-CURRENT on
> a regular pentium computer.  The message pops up sometimes (when logged in
> as root of course), usually when I ping a host or have a few TCP/IP
> connections open.
> 
> Could you instruct me on how to change this restriction?
> 
> Thanks,
> 
> Chris Angell
> 
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
>  Christopher Angell	    |  Chris@Wizard.Com	
>  2001 S. Jones Blvd Suite K |  http://www.wizard.com
>  Las Vegas NV  89146        |  1-702-317-2001
>  1-800-851-4161		    |  Fax 702-317-2057 
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> 
> 
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
> 
> 



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0006181501150.18022-100000>