Subject: Re: Rate limiting ICMP responses?
To: John Klos <>
From: Matt Thomas <>
List: tech-net
Date: 01/13/2002 17:09:31
At 07:50 PM 1/13/2002 -0500, John Klos wrote:
>I'm about to compile a new kernel since I'm restarting so I can add
>hardware, and I'd like to be able to rate limit ICMP responses.
>I really don't want to do this with IP Filter, and I don't see any sysctl
>variables for this.
>How can I set the rate for ICMP responses? Note that I really don't want
>to turn off ICMP; I'd rather have a rate of, say, two responses per second
>so that normal pinging will work. Is there a kernel option for this

It's already in there.  From sysctl(2):

      net.inet.icmp.errppslimit                    integer       yes

Matt Thomas               Internet:
3am Software Foundry      WWW URL:
Cupertino, CA             Disclaimer: I avow all knowledge of this message