Laurent SEROR wrote:
> I need to suppres icmp service because I'm being flood by ping by a
> hacker (about 3Mbits during all day). I can't install ipfwadm or
> ipchains because I got a cobalt on 2.0.34 and ipfwadm make an error on
> compilation.
>
> Is there a simple way to stop all icmp ????
Yes, but:
1. You need to use ipfwadm.
2. You don't want to stop *all* ICMP. Filtering ICMP type 3 code 4 is
likely to break TCP, and filtering ICMP type 3 generally probably
isn't too good.
3. The attacker can always flood you with some other type of packet,
e.g. TCP SYN packets. I presume that these would use more resources
than an ICMP echo request.
--
Glynn Clements <[EMAIL PROTECTED]>
-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]
