Subject: Re: Flood ping directed at a NetBSD box == loads of DNS requests
To: Chris Tribo <t1345@hopi.dtcc.edu>
From: Manuel Bouyer <bouyer@antioche.eu.org>
List: current-users
Date: 07/16/2002 19:23:20
On Mon, Jul 15, 2002 at 07:30:02PM -0400, Chris Tribo wrote:
> On Sun, 14 Jul 2002, Matthias Scheler wrote:
> 
> > In article <Pine.D-G.4.40.0207091821570.4363-100000@zuni.dtcc.edu>,
> > 	Chris Tribo <t1345@hopi.dtcc.edu> writes:
> > > 	I have ipf running, looking at ipfstat -t. Now I flood ping my box
> > > from another machine and I see screen fulls of outgoing DNS requests.
> >
> > Are you running "ipmon"? If you do and you want to avoid this don't
> > invoke it with the option "-n".
> 
> 	I am simply running the standard /etc/rc.d/ipmon script at
> startup. Which states: command_args="-D" (start as daemon)
> 
> 	I'm pulling down a source tree now to see if it's compiled with a
> similar option to -n. There doesn't appear to be a way to override a
> compile time setting for this on the command line.

ipmon is started with -sn (from /etc/defaults/rc.conf). You can override this
by adding
ipmon_flags="-s"
to /etc/rc.conf

-- 
Manuel Bouyer <bouyer@antioche.eu.org>
--