system/freebsd-src
system/freebsd-src
1
0
Fork 0
mirror of https://github.com/freebsd/freebsd-src synced 2024-09-29 13:15:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add option ICMP_BANDLIM_SUPPRESS_OUTPUT to the mix. With this option,

Browse source 
badport_bandlim() will not muck up your console with printf() messages.
This commit is contained in:
Dan Moschuk 2000-05-22 15:00:41 +00:00
parent 1ec5e8e681
commit fcdc02160f
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=60797
5 changed files with 12 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
sys/conf/NOTES
View file

@ -544,9 +544,11 @@ options TCP_RESTRICT_RST #restrict emission of TCP RST
# ICMP_BANDLIM enables icmp error response bandwidth limiting. You
# typically want this option as it will help protect the machine from
# D.O.S. packet attacks.
# D.O.S. packet attacks. Use ICMP_BANDLIM_SUPPRESS_OUTPUT to prevent
# bandwidth limit messages from being dumped to console.
#
options ICMP_BANDLIM
options ICMP_BANDLIM_SUPPRESS_OUTPUT
# DUMMYNET enables the "dummynet" bandwidth limiter. You need
# IPFIREWALL as well. See the dummynet(4) manpage for more info.

1
sys/conf/options
View file

@ -88,6 +88,7 @@ MSGSSZ opt_sysvipc.h
MSGTQL opt_sysvipc.h
UCONSOLE
ICMP_BANDLIM
ICMP_BANDLIM_SUPPRESS_OUTPUT opt_icmp_bandlim.h
VFS_AIO
# POSIX kernel options

4
sys/i386/conf/LINT
View file

@ -544,9 +544,11 @@ options TCP_RESTRICT_RST #restrict emission of TCP RST
# ICMP_BANDLIM enables icmp error response bandwidth limiting. You
# typically want this option as it will help protect the machine from
# D.O.S. packet attacks.
# D.O.S. packet attacks. Use ICMP_BANDLIM_SUPPRESS_OUTPUT to prevent
# bandwidth limit messages from being dumped to console.
#
options ICMP_BANDLIM
options ICMP_BANDLIM_SUPPRESS_OUTPUT
# DUMMYNET enables the "dummynet" bandwidth limiter. You need
# IPFIREWALL as well. See the dummynet(4) manpage for more info.

4
sys/i386/conf/NOTES
View file

@ -544,9 +544,11 @@ options TCP_RESTRICT_RST #restrict emission of TCP RST
# ICMP_BANDLIM enables icmp error response bandwidth limiting. You
# typically want this option as it will help protect the machine from
# D.O.S. packet attacks.
# D.O.S. packet attacks. Use ICMP_BANDLIM_SUPPRESS_OUTPUT to prevent
# bandwidth limit messages from being dumped to console.
#
options ICMP_BANDLIM
options ICMP_BANDLIM_SUPPRESS_OUTPUT
# DUMMYNET enables the "dummynet" bandwidth limiter. You need
# IPFIREWALL as well. See the dummynet(4) manpage for more info.

2
sys/netinet/ip_icmp.c
View file

@ -843,10 +843,12 @@ badport_bandlim(int which)
if ((unsigned int)dticks > hz) {
if (lpackets[which] > icmplim) {
#ifndef ICMP_BANDLIM_SUPPRESS_OUTPUT
printf("icmp-response bandwidth limit %d/%d pps\n",
lpackets[which],
icmplim
);
#endif
}
lticks[which] = ticks;
lpackets[which] = 0;