Le Sat, May 27, 2000 at 05:35:24AM -0700, Sam Habash ecrivit: > I wonder if anybody has incoroprated support for syncookies a la linux. /usr/src/sys/i386/conf/LINT: # ICMP_BANDLIM enables icmp error response bandwidth limiting. You # typically want this option as it will help protect the machine from # D.O.S. packet attacks. # options ICMP_BANDLIM You could also try: options TCP_DROP_SYNFIN #drop TCP packets with SYN+FIN options TCP_RESTRICT_RST #restrict emission of TCP RST if you run an IRC server or such a thing. -- Sameh. To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-stable" in the body of the message
