From owner-freebsd-hackers  Mon Aug 14 16:37:37 2000
Delivered-To: freebsd-hackers@freebsd.org
Received: from bluerose.windmoon.nu (c255152-a.plstn1.sfba.home.com [24.176.132.48])
	by hub.freebsd.org (Postfix) with ESMTP id D39DA37C332
	for <hackers@FreeBSD.ORG>; Mon, 14 Aug 2000 16:35:44 -0700 (PDT)
	(envelope-from fengyue@bluerose.windmoon.nu)
Received: from localhost (fengyue@localhost)
	by bluerose.windmoon.nu (8.10.2/Windmoon/8.10.2) with ESMTP id e7ENp4T06201;
	Mon, 14 Aug 2000 16:51:04 -0700 (PDT)
Date: Mon, 14 Aug 2000 16:51:04 -0700 (PDT)
From: FengYue <fengyue@bluerose.windmoon.nu>
To: Bruce Petro <bpetro@usa.com>
Cc: hackers@FreeBSD.ORG
Subject: Re: ipfw drop packets based on SYN &TTL
In-Reply-To: <383590598.966293068769.JavaMail.root@web303-mc.mail.com>
Message-ID: <Pine.BSF.4.10.10008141650350.6199-100000@bluerose.windmoon.nu>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-hackers@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG


No, TTL is in IP header while SYN & FIN are TCP flags.

On Mon, 14 Aug 2000, Bruce Petro wrote:

> Is this similar to the following kernel configuration?
> options     TCP_DROP_SYNFIN      #drop TCP packets with SYN+FIN
> 
> Thanks!
> Bruce.



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message