Log spam: Limiting * response from 1 to 200 packets/sec

Michael Butler imb at protected-networks.net
Tue Dec 13 15:43:31 UTC 2016


On 12/13/16 10:29, Dimitry Andric wrote:

> Somebody is most likely port scanning your machines.  I see this all the
> time on boxes connected to the internet.

As are mine. I wouldn't mind so much if the message contained sufficient 
useful information that could be acted on, e.g. originating IP address 
and, when appropriate, destination port.

> sysctl net.inet.icmp.icmplim_output=0, or increase the ICMP limit, if
> you want to help the port scanners. :-)

I've added the sysctl to mute the warnings - thanks :-)

	Michael




More information about the freebsd-current mailing list