OpenForum RSS: icmp redirect

icmp redirect (skillcoder)

Tue, 17 Aug 2010 00:50:44 GMT

>[�� ]
>net.inet.icmp.quotelen: 8
>net.inet.icmp.reply_from_interface: 0
>net.inet.icmp.reply_src:
>net.inet.icmp.icmplim_output: 1
>net.inet.icmp.log_redirect: 1
>net.inet.icmp.drop_redirect: 1
>net.inet.icmp.maskfake: 0
>
>�� ?
>�� 7.2-RELEASE

�� .
�� ?
�� ?
# vmstat -z | g "128 Bucket"
128 Bucket: 1048, 0, 2104, 2, 99742, 19359

icmp redirect (skillcoder)

Tue, 10 Aug 2010 10:39:30 GMT

>[�� ]
>>�� ~1��, � �� 15 �� .
>>�� 192.168.0.1 ��, �� .
>>
>>�� : �� ?
>�� , �� ICMP redirects DoS
>� �� freebsd �� , � ��
>��ۣ�, �� .
>� �� -�� , ��
>�� .
>sysctl net.inet.icmp

�� .

sysctl net.inet.icmp
net.inet.icmp.maskrepl: 0
net.inet.icmp.icmplim: 5000
net.inet.icmp.bmcastecho: 0
net.inet.icmp.quotelen: 8
net.inet.icmp.reply_from_interface: 0
net.inet.icmp.reply_src:
net.inet.icmp.icmplim_output: 1
net.inet.icmp.log_redirect: 1
net.inet.icmp.drop_redirect: 1
net.inet.icmp.maskfake: 0

�� ?
�� 7.2-RELEASE

icmp redirect (idle)

Fri, 16 Dec 2005 11:30:32 GMT

>�� kern.log ��:
>
>Dec 13 11:13:37 �� kernel: icmp redirect from 127.0.0.1: 192.168.0.1 => 127.0.0.1
>Dec 13 11:13:37 last message repeated 839 times
>Dec 13 11:13:37 �� kernel: icmp redirect from 12e.0.0.1 19m.167.0.1 1> 127.0.0.1
>Dec 13 11:13:37 �� kernel: icmp redirect from 127.0.0.1: 192.168.0.1 => 127.0.0.1
>Dec 13 11:13:37 last message repeated 6 times
>
>�� ~1��, � �� 15 �� .
>�� 192.168.0.1 ��, �� .
>
>�� : �� ?
�� , �� ICMP redirects DoS
� �� freebsd �� , � �� ۣ�, �� .
� �� -�� , �� .
sysctl net.inet.icmp