Strange kernel messages

Ed Stover estover at nativenerds.com
Sun May 15 04:14:15 PDT 2005


Colin J. Raven wrote:
> Hi all!
> I occasionally get these in my daily security run output (which is
> worrying in itself)
> 
> Limiting closed port RST response from 1629 to 200 packets per second
> 
> the number of these can range from one or two, to sometimes 25 - 30
> although the latter case is rarer. Usually there's about six or so.
> These don't arrive every day, usually about once per week on average.
You get those when someone nmaps you. What I do aside from FreeBSD's
builtin anti-DOS stuff is;
1. Blackholeing
2.portsentry (it is kinda a honey pot but has some pretty neat features)
> 
> Is this an OS response to an attempted attack, limiting potential DDOS
> damage? 
yes it is. How heavily loaded is your server?
>That's how I'm reading it, but of course I'm guessing. If that
> *is* so, what mechanism is doing this?
Others have answered this question allready ;)
> 
> FreeBSD 4.11 STABLE
> 
> Regards & TIA
> -Colin
> 
> 
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "freebsd-questions-unsubscribe at freebsd.org"
> 


More information about the freebsd-questions mailing list