ping of death

Chris Buechler cbuechler at gmail.com
Thu Aug 30 13:32:16 PDT 2007


On 8/30/07, Lorenz Helleis <lorenzhelleis at yahoo.com.br> wrote:
> Nessus give it to me:
>
> Mensagem:
> The machine crashed when pinged with an incorrectly fragmented packet.
> This is known as the 'jolt' or 'ping of death' denial of service attack.
>
> An attacker may use this flaw to shut down this server,
> thus preventing you from working properly.
>
> Solution : contact your operating system vendor for a patch.
>
> How can i fix this using pf ??
>

You'll have to be a whole lot more specific - did a machine actually
crash? If not, that's a false positive from Nessus.  If so, what
machine crashed? One running FreeBSD with pf? One behind a firewall
running FreeBSD with pf?

-Chris


More information about the freebsd-pf mailing list