Date: Sun, 03 Jul 2005 23:56:39 +0200 From: Jesper Wallin <jesper@ifconfig.se> To: Garrett Wollman <wollman@csail.mit.edu> Cc: freebsd-security@freebsd.org Subject: Re: packets with syn/fin vs pf_norm.c Message-ID: <42C85F17.4050202@ifconfig.se> In-Reply-To: <17095.18308.135102.939517@khavrinen.csail.mit.edu> References: <42C70FED.8080003@hackunite.net> <17095.18308.135102.939517@khavrinen.csail.mit.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
Garrett Wollman wrote: ><<On Sun, 03 Jul 2005 00:06:37 +0200, Jesper Wallin <jesper@www.hackunite.net> said: > > > >>First of all, I know that not dropping SYN/FIN isn't really a big deal, it >>just makes no sense. But since it doesn't make any sense, I don't see >>the reason why not to discard them. >> >> > >Perhaps because you are under the erroneous impression that such >packets are nonsensical. > >-GAWollman > That might be the case yeah.. Yet, if I have TCP_DROP_SYNFIN in my kernel and sysctrl net.inet.tcp.drop_synfin set to 1, shouldn't it drop all SYN/FIN packets no matter how my firewall is configured? Best regards, Jesper Wallin
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?42C85F17.4050202>