Good point! I didn't think of that.... :-) I'm much the wiser for that one now.... <grin> -Ahsan ----- Original Message ----- From: "Ben" <bench@muppetlabs.com> To: "Ahsan Ali" <ahsan.ali@mail.com> Cc: "Ralf G. R. Bergs" <rabe@RWTH-Aachen.DE>; <linux-net@vger.rutgers.edu> Sent: Monday, July 03, 2000 5:47 AM Subject: Re: Source quench? > Actually, I thought an easy DOS attack was to send a machine a bunch of > source quenches until it slowed down so much it was practically offline. > > On Mon, 3 Jul 2000, Ahsan Ali wrote: > > > ICMP source quench messages are sent when your host (or a process on your > > host to be precise) is sending data too fast for the network/remote end to > > handle. These messages tell your machine to slow down its tranmission to let > > the remote end cope with the traffic. > > > > You shouldn't filter them unless you're flooding someone intentionally... ;p > > > > -Ahsan Ali > > ----- Original Message ----- > > From: "Ralf G. R. Bergs" <rabe@RWTH-Aachen.DE> > > To: "linux-net Mailing List" <linux-net@vger.rutgers.edu> > > Sent: Monday, July 03, 2000 12:31 AM > > Subject: ICMP: Source quench? > > > > > > > Hi there, > > > > > > can you explain me what "source quench" means? ICMPLogD frequently > > notifies me > > > that my box received these packets from some peer host. > > > > > > Should I filter these packets at my firewall? > > > > > > Thanks, > > > > > > Ralf > > > > > > > > > -- > > > Sign the EU petition against SPAM: L I N U X .~. > > > http://www.politik-digital.de/spam/ The Choice /V\ > > > of a GNU /( )\ > > > Generation ^^-^^ > > > > > > > > > - > > > : send the line "unsubscribe linux-net" in > > > the body of a message to majordomo@vger.rutgers.edu > > > > > > > > > - > > : send the line "unsubscribe linux-net" in > > the body of a message to majordomo@vger.rutgers.edu > > > > > - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.rutgers.edu
