Subject: Re: Flood ping directed at a NetBSD box == loads of DNS requests
To: Matthias Scheler <tron@zhadum.de>
From: Chris Tribo <t1345@hopi.dtcc.edu>
List: current-users
Date: 07/15/2002 19:30:02
On Sun, 14 Jul 2002, Matthias Scheler wrote:

> In article <Pine.D-G.4.40.0207091821570.4363-100000@zuni.dtcc.edu>,
> 	Chris Tribo <t1345@hopi.dtcc.edu> writes:
> > 	I have ipf running, looking at ipfstat -t. Now I flood ping my box
> > from another machine and I see screen fulls of outgoing DNS requests.
>
> Are you running "ipmon"? If you do and you want to avoid this don't
> invoke it with the option "-n".

	I am simply running the standard /etc/rc.d/ipmon script at
startup. Which states: command_args="-D" (start as daemon)

	I'm pulling down a source tree now to see if it's compiled with a
similar option to -n. There doesn't appear to be a way to override a
compile time setting for this on the command line.


	Chris