Re: Urgent: Under attack - need tcpdrop help

2011-05-25 Thread Damien Fleuriot
On 5/24/11 10:53 PM, Alejandro Imass wrote: > On Tue, May 24, 2011 at 4:29 PM, Andy Wodfer wrote: >> Hi, >> One of my FreeBSD servers is currently being attacked (DDOS) and I'm >> blocking IP addresses in my firewall. However, there are a large number of >> hung tcp connections and I want them g

Re: Urgent: Under attack - need tcpdrop help

2011-05-25 Thread Damien Fleuriot
On 5/24/11 10:29 PM, Andy Wodfer wrote: > Hi, > One of my FreeBSD servers is currently being attacked (DDOS) and I'm > blocking IP addresses in my firewall. However, there are a large number of > hung tcp connections and I want them gone. > > Can anyone help me with a script (command line) that

RE: Urgent: Under attack - need tcpdrop help

2011-05-24 Thread Gary Gatten
g] On Behalf Of Andy Wodfer Sent: Tuesday, May 24, 2011 5:10 PM To: glar...@freebsd.org Cc: freebsd-questions Subject: Re: Urgent: Under attack - need tcpdrop help Thanks a lot! That was very helpful! Things have calmed down now. However, I was surprised to see how quick the tcp connections

Re: Urgent: Under attack - need tcpdrop help

2011-05-24 Thread Andy Wodfer
Thanks a lot! That was very helpful! Things have calmed down now. However, I was surprised to see how quick the tcp connections came back in netstat. Have to take a closer look at my firewall I guess. Cheers! Andy On Tue, May 24, 2011 at 11:00 PM, Greg Larkin wrote: > -BEGIN PGP SIGNED ME

Re: Urgent: Under attack - need tcpdrop help

2011-05-24 Thread Greg Larkin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 5/24/11 4:48 PM, Andy Wodfer wrote: > Thanks! > That would work on all my servers except this one .. which runs 6.3 STABLE > (due to some old services requiring old software). > > Any other suggestions? > > Thanks! > > Andy > Ok, here goes: ne

Re: Urgent: Under attack - need tcpdrop help

2011-05-24 Thread Alejandro Imass
On Tue, May 24, 2011 at 4:29 PM, Andy Wodfer wrote: > Hi, > One of my FreeBSD servers is currently being attacked (DDOS) and I'm > blocking IP addresses in my firewall. However, there are a large number of > hung tcp connections and I want them gone. > I know it's not what you're asking but for t

Re: Urgent: Under attack - need tcpdrop help

2011-05-24 Thread Andy Wodfer
Thanks! That would work on all my servers except this one .. which runs 6.3 STABLE (due to some old services requiring old software). Any other suggestions? Thanks! Andy On Tue, May 24, 2011 at 10:42 PM, Greg Larkin wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 5/24/11 4:29

Re: Urgent: Under attack - need tcpdrop help

2011-05-24 Thread Greg Larkin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 5/24/11 4:29 PM, Andy Wodfer wrote: > Hi, > One of my FreeBSD servers is currently being attacked (DDOS) and I'm > blocking IP addresses in my firewall. However, there are a large number of > hung tcp connections and I want them gone. > > Can anyon