From owner-freebsd-net  Sun Jan 12 17:47:30 2003
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 95BC737B401
	for <freebsd-net@FreeBSD.ORG>; Sun, 12 Jan 2003 17:47:29 -0800 (PST)
Received: from mail.econolodgetulsa.com (mail.econolodgetulsa.com [198.78.66.163])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 2BFF643EB2
	for <freebsd-net@FreeBSD.ORG>; Sun, 12 Jan 2003 17:47:29 -0800 (PST)
	(envelope-from user@mail.econolodgetulsa.com)
Received: from mail (user@mail [198.78.66.163])
	by mail.econolodgetulsa.com (8.12.3/8.12.3) with ESMTP id h0D1lTZb044697;
	Sun, 12 Jan 2003 17:47:29 -0800 (PST)
	(envelope-from user@mail.econolodgetulsa.com)
Date: Sun, 12 Jan 2003 17:47:29 -0800 (PST)
From: Josh Brooks <user@mail.econolodgetulsa.com>
To: Bill Fumerola <billf@mu.org>
Cc: Luigi Rizzo <rizzo@icir.org>, <freebsd-net@FreeBSD.ORG>
Subject: Re: ipfw rules - SYN w/o MSS, and ACK with 0 sequence number
In-Reply-To: <20030113014437.GI35166@elvis.mu.org>
Message-ID: <20030112174652.C78856-100000@mail.econolodgetulsa.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-net@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-net.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-net>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-net>
X-Loop: FreeBSD.org


> also, ipfw can match packets by ack#. i've used this as criteria for a
> dummynet pipe rule in the past.

Great - that is just what I am looking for - so I can drop all packets
with an ack of zero.

Can someone show me an example rule of said behavior ?


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message