Subject: Re: Flood ping directed at a NetBSD box == loads of DNS requests
To: Matthias Scheler <tron@zhadum.de>
From: Chris Tribo <t1345@hopi.dtcc.edu>
List: current-users
Date: 07/15/2002 19:30:02
On Sun, 14 Jul 2002, Matthias Scheler wrote:
> In article <Pine.D-G.4.40.0207091821570.4363-100000@zuni.dtcc.edu>,
> Chris Tribo <t1345@hopi.dtcc.edu> writes:
> > I have ipf running, looking at ipfstat -t. Now I flood ping my box
> > from another machine and I see screen fulls of outgoing DNS requests.
>
> Are you running "ipmon"? If you do and you want to avoid this don't
> invoke it with the option "-n".
I am simply running the standard /etc/rc.d/ipmon script at
startup. Which states: command_args="-D" (start as daemon)
I'm pulling down a source tree now to see if it's compiled with a
similar option to -n. There doesn't appear to be a way to override a
compile time setting for this on the command line.
Chris