[4233] in linux-net channel archive
Re: SYN floods
daemon@ATHENA.MIT.EDU (Olaf Titz)
Thu Aug 29 12:39:05 1996
Cc: recipient.list.not.shown:;@vger.rutgers.edu
From: Olaf Titz <olaf@bigred.inka.de>
Date: 29 Aug 1996 16:58:15 +0200
To: ;@unlisted-recipients (no To-header on input)
Martin Mares <mj@k332.feld.cvut.cz> wrote:
> Shouldn't we also limit the rate of outgoing Echo Reply packets as
> we do in the case of ICMP errors? It wouldn't solve the ping attack
> problem completely, but the impact would be substantially less.
Of course, then we would be faced with a new FAQ: "Linux loses many
packets with ping -f" (Linux as the target machine). Since the only
case where this ever is really needed is testing, perhaps we could get
along with that...
olaf
--
___ Olaf.Titz@inka.de or @{stud,informatik}.uni-karlsruhe.de ____
__ o <URL:http://www.inka.de/~bigred/> <IRC:praetorius>
__/<_ >> Just as long as the wheels keep on turning round
_)>(_)______________ I will live for the groove 'til the sun goes down << ____
