Re: Bad loopback traffic not stopped by ipfw.

From: Gleb Smirnoff (glebius_at_cell.sick.ru)
Date: 02/25/04

  • Next message: Zhang Weiwu: "register DNS entry with dhclient" 
    Date: Wed, 25 Feb 2004 17:21:34 +0300
To: Iasen Kostov <tbyte@OTEL.net>

    On Wed, Feb 25, 2004 at 04:19:51PM +0200, Iasen Kostov wrote:
    I> >>16:26:23.287642 0:1:2:9>c:cf:e2 0:02:55:b0:90:e4 0800 60: 127.0.0.1.80 >
    I> >>192.168.118.205.1046: R 0:0(0) ack 1959723009 win 0
    I> >
    I> >This is some kind of Win32 virus. This floods can be easily
    I> >stopped by ipfw rule:
    I> >
    I> >deny tcp from any to any tcpflags rst,ack
    I> >
    I> >
    I> >
    I> These packets never reach IPFW as we can see.

    Ughu. Really.
    But I have millions of them from non-localhost addresses.

    P.S. This is really off-topic already. We should move to -isp@ may be. 

    -- 
Totus tuus, Glebius.
GLEBIUS-RIPN GLEB-RIPE
_______________________________________________
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
  • Next message: Zhang Weiwu: "register DNS entry with dhclient"