Blocking Virus ICMP flood

Don Bowman don at sandvine.com
Sun Aug 24 07:57:20 PDT 2003


> From: User Ernie [mailto:ernie at spooky.eis.net.au]
> 
> Does anyone know if ipfw can do someting similar to:
> 
>  deny icmp any any echo tos min-delay
> 
> Which is the Cisco command I use to try and limit the flood 
> style icmp traffic from the
> recent Internet viruses.
> 
> - Ernie.

ipfw add deny icmp from any to any icmptypes 0,8  iptos lowdelay


More information about the freebsd-isp mailing list