* IPtable Server hanging
@ 2003-12-04 13:00 hare ram
2003-12-04 14:01 ` Chris Brenton
0 siblings, 1 reply; 2+ messages in thread
From: hare ram @ 2003-12-04 13:00 UTC (permalink / raw)
To: netfilter
Hi all
iam running iptable 1.2.8 on RH - pIII dual CPU 550mhz, 512MB RAM
i have connected to internet eth0
eth1 and eth2 connected to my clients
after i connected the Links to eth1 and eth2
the CPU load goes to 100% both
when i drop the ICMP in INPUT and FORWARD
the CPU load go to 5%
what could the problem, how can i resolve this problem
what is the problem is this ICMP flood or Syn attack or DoS attack
can any one suggest good tools and script to over come this problem
hare
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: IPtable Server hanging
2003-12-04 13:00 IPtable Server hanging hare ram
@ 2003-12-04 14:01 ` Chris Brenton
0 siblings, 0 replies; 2+ messages in thread
From: Chris Brenton @ 2003-12-04 14:01 UTC (permalink / raw)
To: netfilter
On Thu, 2003-12-04 at 08:00, hare ram wrote:
>
> after i connected the Links to eth1 and eth2
> the CPU load goes to 100% both
>
> when i drop the ICMP in INPUT and FORWARD
> the CPU load go to 5%
>
> what could the problem,
Too much ICMP traffic? ;-)
> how can i resolve this problem
> what is the problem is this ICMP flood or Syn attack or DoS attack
Sounds like an ICMP flood, possibly due to Nachi or some variant.
Start logging traffic. That will tell you which IP is originating the
flood. If its internal systems, cleaning and patching is in order.
HTH,
C
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2003-12-04 14:01 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2003-12-04 13:00 IPtable Server hanging hare ram
2003-12-04 14:01 ` Chris Brenton
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox