Good point! I didn't think of that.... :-)
I'm much the wiser for that one now.... <grin>
-Ahsan
----- Original Message -----
From: "Ben" <[EMAIL PROTECTED]>
To: "Ahsan Ali" <[EMAIL PROTECTED]>
Cc: "Ralf G. R. Bergs" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Monday, July 03, 2000 5:47 AM
Subject: Re: Source quench?
> Actually, I thought an easy DOS attack was to send a machine a bunch of
> source quenches until it slowed down so much it was practically offline.
>
> On Mon, 3 Jul 2000, Ahsan Ali wrote:
>
> > ICMP source quench messages are sent when your host (or a process on
your
> > host to be precise) is sending data too fast for the network/remote end
to
> > handle. These messages tell your machine to slow down its tranmission to
let
> > the remote end cope with the traffic.
> >
> > You shouldn't filter them unless you're flooding someone
intentionally... ;p
> >
> > -Ahsan Ali
> > ----- Original Message -----
> > From: "Ralf G. R. Bergs" <[EMAIL PROTECTED]>
> > To: "linux-net Mailing List" <[EMAIL PROTECTED]>
> > Sent: Monday, July 03, 2000 12:31 AM
> > Subject: ICMP: Source quench?
> >
> >
> > > Hi there,
> > >
> > > can you explain me what "source quench" means? ICMPLogD frequently
> > notifies me
> > > that my box received these packets from some peer host.
> > >
> > > Should I filter these packets at my firewall?
> > >
> > > Thanks,
> > >
> > > Ralf
> > >
> > >
> > > --
> > > Sign the EU petition against SPAM: L I N U X .~.
> > > http://www.politik-digital.de/spam/ The Choice /V\
> > > of a GNU /( )\
> > > Generation ^^-^^
> > >
> > >
> > > -
> > > To unsubscribe from this list: send the line "unsubscribe linux-net"
in
> > > the body of a message to [EMAIL PROTECTED]
> > >
> >
> >
> > -
> > To unsubscribe from this list: send the line "unsubscribe linux-net" in
> > the body of a message to [EMAIL PROTECTED]
> >
>
>
>
-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]