If you use a Cisco Router, go to: www.cisco.com Browse and search to DDoS... I will find information about "rate limit". Javier Romero Danny Wong wrote: > -----Original Message----- > From: Danny Wong <[EMAIL PROTECTED]> > To: [EMAIL PROTECTED] <[EMAIL PROTECTED]> > Date: Monday, February 21, 2000 5:38 PM > Subject: help > > >I found the following in our log file. And I am still waiting for help from > >our isp. > >Do you think it is a DDos? Or something else. How can I find the actual > >sourc of it? Also, I found no abnormal traffic before it. > > > >Feb 15 08:59:04 host /kernel: ipfw: 9170 Deny ICMP:8.0 208.45.133.3 a.b.c.d > >in via xl0 > >Feb 15 08:59:04 host /kernel: ipfw: 9170 Deny ICMP:8.0 216.52.239.2 a.b.c.d > >in via xl0 > >Feb 15 08:59:04 host /kernel: ipfw: 9170 Deny ICMP:8.0 206.86.106.3 a.b.c.d > >in via xl0 > >Feb 15 08:59:04 host /kernel: ipfw: 9170 Deny ICMP:8.0 198.170.164.3 > a.b.c.d > >in via xl0 > >Feb 15 08:59:04 host /kernel: ipfw: 9170 Deny ICMP:8.0 203.131.227.2 > a.b.c.d > >in via xl0 > >Feb 15 08:59:04 host /kernel: ipfw: 9170 Deny ICMP:8.0 210.175.166.8 > a.b.c.d > >in via xl0 > >Feb 15 08:59:04 host /kernel: ipfw: 9170 Deny ICMP:8.0 210.180.22.3 a.b.c.d > >in via xl0 > >Feb 15 08:59:04 host /kernel: ipfw: 9170 Deny ICMP:8.0 212.78.162.3 a.b.c.d > >in via xl0 > >Feb 15 08:59:04 host /kernel: ipfw: 9170 Deny ICMP:8.0 203.126.212.130 > >a.b.c.d in via xl0 > >Feb 15 08:59:04 host /kernel: ipfw: 9170 Deny ICMP:8.0 212.36.169.97 > a.b.c.d > >in via xl0 > >Feb 15 08:59:04 host /kernel: ipfw: 9170 Deny ICMP:8.0 212.121.130.40 > >a.b.c.d in via xl0 > >Feb 15 08:59:04 host /kernel: ipfw: 9170 Deny ICMP:8.0 212.35.98.3 a.b.c.d > >in via xl0 > > - > [To unsubscribe, send mail to [EMAIL PROTECTED] with > "unsubscribe firewalls" in the body of the message.] - [To unsubscribe, send mail to [EMAIL PROTECTED] with "unsubscribe firewalls" in the body of the message.]
