daRcmaTTeR wrote: > On Wed, 2 Jan 2002 15:31:01 +0700 > Pipit <[EMAIL PROTECTED]> studiouisly spake these words to ponder: > > >>Mdk 8.1 iptables. >>Someone know what is this and how to solve it ? >>It look like it ate the bandwith. >>Is it smurf or etc ? >> >>For the moment, i turn off the ipvsadm service. >> >>kernel: IPVS: incoming ICMP: failed checksum from x.x.x.x! >>kernel: IPVS: incoming ICMP: failed checksum from y.y.y.y! >>... >> >>-- >>Best regards, >>Pipit >> >> >> >> > > well...if it sucked up your bandwidth my guess would be a DDoS attack of > sorts. > > > > ------------------------------------------------------------------------ > > Want to buy your Pack or Services from MandrakeSoft? > Go to http://www.mandrakestore.com >
pings failing checksums are more likely ping of death than smurf. Mostly they just waste bandwidth these days--most smurfable routers have been replaced so a ping at the network address no longer rings it like a bell. Older DDoS attacks would be both giant UDPs and ICMPs, but if someone has compromised a box or six running XP then attacks can take any form whatsoever, since XP has full rawsocket capability. For the moment, unless you need to respond to test messages, simply drop ICMP protocol messages of any sort with an iptables input rule. Civileme
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
