Re: Limit the number of Router Advertisements processed on an interface

--0000000000001471db05e17f0059
Content-Type: text/plain; charset="UTF-8"

Thanks Marc.  This is a requirement.

Thus I will conclude that the kernel doesn't limit the number of RAs. I
have to figure out a way to do this from user space.

Dheeraj

On Wed, Jun 15, 2022 at 11:49 AM Marc Haber <[email protected]>
wrote:

> On Wed, Jun 15, 2022 at 10:23:18AM -0400, Dheeraj Kandula wrote:
> > This is to avoid DOS attacks using RAs from being bombarded onto a linux
> > machine.
>
> You have malicious users on your LAN and cannot do anything against
> them?
>
> (RAs are link local communication and should not pass over routers,
> thus, RAs must originate in the local network).
>
> Greetings
> Marc
>
> --
>
> -----------------------------------------------------------------------------
> Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
> Leimen, Germany    |  lose things."    Winona Ryder | Fon: *49 6224 1600402
> Nordisch by Nature |  How to make an American Quilt | Fax: *49 6224 1600421
>
>

--0000000000001471db05e17f0059
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Thanks Marc.=C2=A0 This is a requirement.<br></div><d=
iv><br></div><div>Thus I will conclude that the kernel doesn&#39;t limit th=
e number of RAs. I have to figure out a way to do this from user space.<br>=
</div><div><br></div><div>Dheeraj<br></div></div><br><div class=3D"gmail_qu=
ote"><div dir=3D"ltr" class=3D"gmail_attr">On Wed, Jun 15, 2022 at 11:49 AM=
 Marc Haber &lt;<a href=3D"mailto:mh%[email protected]">mh+debian-=
[email protected]</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote"=
 style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);p=
adding-left:1ex">On Wed, Jun 15, 2022 at 10:23:18AM -0400, Dheeraj Kandula =
wrote:<br>
&gt; This is to avoid DOS attacks using RAs from being bombarded onto a lin=
ux<br>
&gt; machine.<br>
<br>
You have malicious users on your LAN and cannot do anything against<br>
them?<br>
<br>
(RAs are link local communication and should not pass over routers,<br>
thus, RAs must originate in the local network).<br>
<br>
Greetings<br>
Marc<br>
<br>
-- <br>
---------------------------------------------------------------------------=
--<br>
Marc Haber=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0| &quot;I don&#39;t trust Compu=
ters. They | Mailadresse im Header<br>
Leimen, Germany=C2=A0 =C2=A0 |=C2=A0 lose things.&quot;=C2=A0 =C2=A0 Winona=
 Ryder | Fon: *49 6224 1600402<br>
Nordisch by Nature |=C2=A0 How to make an American Quilt | Fax: *49 6224 16=
00421<br>
<br>
</blockquote></div>

--0000000000001471db05e17f0059--