Blocking udp flood trafiic using pf, hints welcome

[Elvir Kuric]

Hello Daniel,

thank you for answer, I understand, but I know pf is very powerful
tool I want to make some workaround using pf to perform blocking udp
floods, rule creation is not problem and I understand pf syntax. ISP
also use I suppose pf as firewall on their machines, so if they can,
I/we using pf aslo can make that :).
I am reading manuals, HOWTOs, because I know it must be some way to
make what I want using pf firewall tool

Kind regards,

Elvir


On Sun, Nov 9, 2008 at 11:47 AM, Daniel Gerzo <danger at freebsd.org> wrote:
> Hello Elvir,
>
> Sunday, November 9, 2008, 10:37:29 AM, you wrote:
>
>> My question would be, what are your experinces with battling against
>> boring udp flooders ? Platform are FreeBSD / OpenBSD and all works
>> like a charm except time to time, stupid udp flood atacks.
>
> Ask your ISP to block UDP upfront, so that it won't hit you at all.
> You probably don't need incomming UDP anyway...
>
> --
> Best regards,
>  Daniel                            mailto:danger at FreeBSD.org
>
>