router stops working because of udp packets
Tom Samplonius
tom at sdf.com
Fri May 16 19:28:43 PDT 2003
On Fri, 16 May 2003, Thomas Krause -CI- wrote:
...
> I belive the host of the customer was hacked. Does anybody know what's
> running on the host? How I can prevent such attacks? There are any
> kernel-options? Or should I limit the udp traffic?
It is the Slammer worm. It can easily generate 60Mbps of traffic on a
fast ethernet LAN. It seems that your router does not have enough
resources to route that much. Perhaps add more mbufs, and more efficient
network cards. If using the fxp driver, use the link0 flag to reduce
interupts.
> BTW: 4.6.2-RELEASE-p9 is running on the router.
You should probably upgrade to 4.8 too.
> Regards,
> Thomas.
Tom
More information about the freebsd-isp
mailing list