Hi,
A while ago (it's been at least two weeks now), Mike Silbersack
requested a review for:
http://www.silby.com/patches/ratelimit-enhancement-2.patch
To quote the description on his web page, this diff will:
* ICMP ECHO and TSTAMP replies are now rate-limited.
* RSTs generated due to packets sent to open and unopen ports
are now seperated into separate queues.
* Each rate limiting queue now has its own description, as
follows:
Suppressing udp flood/scan: 212/200 pps
Suppressing outgoing RST due to port scan: 202/200 pps
Suppressing outgoing RST due to ACK flood: 19725/200 pps
Suppressing ping flood: 230/200 pps
Suppressing icmp tstamp flood: 210/200 pps
While the descriptions for the two RST cases can be accused
of oversimplification, they should cut down on questions by
users confused with the current terminology. Experienced
users can always run a packet sniffer if they need more
exact knowledge of what's occuring.
The diff was initially reviewed by me and green, and the recommended
changes were mainly stylistic. I want to commit this code, but I'm
posting it up here in case someone has any final objections or review.
Thanks,
Bosko Milekic
[EMAIL PROTECTED]
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-net" in the body of the message
