Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    What is the biggest attack in GBPS you stopped

    Scheduled Pinned Locked Moved General pfSense Questions
    737 Posts 33 Posters 600.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      Supermule Banned
      last edited by

      No problem.

      Let me know when youre ready and what IP/port it is.

      1 Reply Last reply Reply Quote 0
      • S
        Supermule Banned
        last edited by

        .-….........

        1 Reply Last reply Reply Quote 0
        • H
          Harvy66
          last edited by

          How resilient? No longer an issue for established connections as long as there is enough bandwidth, kind of resilient? You tone makes it sound as if it is effectively fixed. Time to party?  8)

          1 Reply Last reply Reply Quote 0
          • S
            Supermule Banned
            last edited by

            EDIT: It was my bandwith that caused to attacked IP to survive.

            No change in resilience. (Sorry).

            1 Reply Last reply Reply Quote 0
            • H
              Harvy66
              last edited by

              @Supermule:

              EDIT: It was my bandwith that caused to attacked IP to survive.

              No change in resilience. (Sorry).

              It was your bandwidth? Isn't that the goal? The weakest link should be the bandwidth, not the firewall, yes? What issue(s) still remain? Same?

              1 Reply Last reply Reply Quote 0
              • S
                Supermule Banned
                last edited by

                As soon as I was able to push 10mbit/s out on my private line, then it failed again….

                1 Reply Last reply Reply Quote 0
                • H
                  Harvy66
                  last edited by

                  So 10Mb/s of special traffic against your greater than 10Mb/s link caused the link to fail? Did the firewall stop working or only the link go down?

                  1 Reply Last reply Reply Quote 0
                  • S
                    Supermule Banned
                    last edited by

                    Firewall stopped routing traffic. Link was fine.

                    Lots of packetloss once again.

                    1 Reply Last reply Reply Quote 0
                    • H
                      Harvy66
                      last edited by

                      So same issue as before, firewall is the weakest link, not the bandwidth? Maybe 2.3.

                      Any news from the FreeBSD side of things?

                      1 Reply Last reply Reply Quote 0
                      • S
                        Supermule Banned
                        last edited by

                        Not yet. They are digesting the attack that I did yesterday and curretnly looking at states not beeing freed as they should…. AFAIK.

                        1 Reply Last reply Reply Quote 0
                        • T
                          torontob
                          last edited by

                          Did this end up in nowhere with the issue still being there?

                          1 Reply Last reply Reply Quote 0
                          • S
                            Supermule Banned
                            last edited by

                            Still working on it.

                            1 Reply Last reply Reply Quote 0
                            • S
                              Supermule Banned
                              last edited by

                              https://lists.freebsd.org/pipermail/freebsd-announce/2015-July/001655.html

                              Latest update.

                              1 Reply Last reply Reply Quote 0
                              • P
                                peterclark4
                                last edited by

                                @Supermule:

                                https://lists.freebsd.org/pipermail/freebsd-announce/2015-July/001655.html

                                Latest update.

                                Does this need to be included in 2.2.4 before it is released?

                                1 Reply Last reply Reply Quote 0
                                • S
                                  Supermule Banned
                                  last edited by

                                  That would be a very good idea if possible!

                                  Opnsense has this fix done allready and a full release on friday.

                                  1 Reply Last reply Reply Quote 0
                                  • M
                                    maverick_slo
                                    last edited by

                                    Do they have snapshot that you could test?

                                    1 Reply Last reply Reply Quote 0
                                    • S
                                      Supermule Banned
                                      last edited by

                                      Waiting for the update to come. I will update and report back.

                                      1 Reply Last reply Reply Quote 0
                                      • H
                                        Harvy66
                                        last edited by

                                        @peterclark4:

                                        @Supermule:

                                        https://lists.freebsd.org/pipermail/freebsd-announce/2015-July/001655.html

                                        Latest update.

                                        Does this need to be included in 2.2.4 before it is released?

                                        You beat me to it. This thread is the first thing I thought about when I saw this in G+

                                        https://www.freebsd.org/security/advisories/FreeBSD-SA-15:13.tcp.asc

                                        1 Reply Last reply Reply Quote 0
                                        • H
                                          Harvy66
                                          last edited by

                                          Supermule, is this directly related to what you've been digging into?

                                          1 Reply Last reply Reply Quote 0
                                          • S
                                            Supermule Banned
                                            last edited by

                                            Could very well be.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.