Re: how to know if i'm under flood?

From: Chuck Swiger (cswiger_at_mac.com)
Date: 08/29/05

  • Next message: Edward Kourian: "REQUEST !!!" 
    Date: Mon, 29 Aug 2005 02:41:39 -0400
To: vladone <vladone@spaingsm.com>

    vladone wrote:
    > If u have more experience, please give some example about what sysctl
    > variable to set, and wich ipfw rules can prevent DoS.

    If your inbound pipe(s) are saturated due to DoS flood traffic, there is very
    little you can do about it locally. You have to get your ISP to filter
    upstream to do any real good. Or be prepared to renumber your IP addresses to
    a new netblock in order to dodge the DoS. 

    -- 
-Chuck
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"
  • Next message: Edward Kourian: "REQUEST !!!"

    Relevant Pages

    • Re: Limiting closed port RST response from 381 to 200 p
      ... > syslog DoS somewhat as well. ... although having a sysctl which allows one to switch over ... probably involve a much higher packet rate. ...
      (FreeBSD-Security)
    • BETA6 kern.maxfiles messages
      ... I'm suspicious someone was trying to probe or dos this server, ... This is what kern.maxfiles looks like under normal operation. ... # sysctl kern.openfiles ...
      (freebsd-current)
    • Re[4]: how to know if im under flood?
      ... please give some example about what sysctl ... and wich ipfw rules can prevent DoS. ... To unsubscribe, ...
      (freebsd-questions)