On Thu, Aug 02, 2001 at 04:22:15PM -0300, Harald Welte wrote:
> > this patch introduces global icmp rate limiting
> > (/proc/sys/net/ipv4/icmp_ratelimit) with the ability to arbitary
> > rate limit or unlimit certain icmp types (/proc/sys/net/ipv4/icmp_ratemask,
> > but you better have a look at icmp.c before changing this).
>
> If somebody is going to change the icmp rate limiting code, please take
> into consideration fixing the kernel/userspace interface as well.
you're absolutly right.
please consider patch attached.
unit for icmp_ratelimit will be [packets/second].
HZ multiplication is cached in icmpv4_xrlim_allow.
networking code maintainers please take note of this patch. i haven't got any
response by official maintainers.
clemens
icmp-global-rate3.patch
Description: Text document
|