From owner-freebsd-questions Thu Jan 20 22: 9:13 2000 Delivered-To: freebsd-questions@freebsd.org Received: from tomts2-srv.bellnexxia.net (tomts2.bellnexxia.net [209.226.175.140]) by hub.freebsd.org (Postfix) with ESMTP id A681515167 for ; Thu, 20 Jan 2000 22:09:09 -0800 (PST) (envelope-from willwong@anime.ca) Received: from magus ([216.209.45.41]) by tomts2-srv.bellnexxia.net (InterMail vM.4.01.02.07 201-229-116-107) with SMTP id <20000121060909.RNKP26813.tomts2-srv.bellnexxia.net@magus>; Fri, 21 Jan 2000 01:09:09 -0500 Message-ID: <003601bf63d6$07762e40$0300a8c0@anime.ca> From: "William Wong" To: "matt" Cc: References: Subject: Re: Restricting RST & Dropping SYN/FIN (was; stream.c) Date: Fri, 21 Jan 2000 01:09:08 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2919.6600 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6600 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG You need to compile the options into your kernel. Take a look at LINT. ----- Original Message ----- From: "matt" To: "FreeBSD-STABLE" Sent: Friday, January 21, 2000 1:03 AM Subject: Restricting RST & Dropping SYN/FIN (was; stream.c) > > curious.. on 3.4-stable, cvsupped Dec. 29 1999, defaults/rc.conf has; > > TCP_DROP_SYNFIN and TCP_RESTRICT_RST, which point to: > > sysctl net.inet.tcp.drop_synfin and net.inet.tcp.restrict_rst, However: > > root[w01]:~# sysctl -w net.inet.tcp.restrict_rst=1 > sysctl: unknown oid 'net.inet.tcp.restrict_rst' > root[w01]:~# sysctl -w net.inet.tcp.drop_synfin=1 > sysctl: unknown oid 'net.inet.tcp.drop_synfin' > > Is this not functional yet? Or does it require something that I'm missing > here? As I said, the machine is 3.4-STABLE as of Dec. 29 1999. > > -Matt > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-stable" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message