Re: Log spam: Limiting * response from 1 to 200 packets/sec

From: Michael Butler <imb_at_protected-networks.net>
Date: Tue, 13 Dec 2016 10:43:27 -0500
On 12/13/16 10:29, Dimitry Andric wrote:

> Somebody is most likely port scanning your machines.  I see this all the
> time on boxes connected to the internet.

As are mine. I wouldn't mind so much if the message contained sufficient 
useful information that could be acted on, e.g. originating IP address 
and, when appropriate, destination port.

> sysctl net.inet.icmp.icmplim_output=0, or increase the ICMP limit, if
> you want to help the port scanners. :-)

I've added the sysctl to mute the warnings - thanks :-)

	Michael
Received on Tue Dec 13 2016 - 14:43:31 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:41:09 UTC