From nobody Sun Aug 11 14:15:49 2024 X-Original-To: freebsd-net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Whfnl0lvMz5SvRG for ; Sun, 11 Aug 2024 14:15:55 +0000 (UTC) (envelope-from hausen@punkt.de) Received: from FR4P281CU032.outbound.protection.outlook.com (mail-germanywestcentralazlp170120004.outbound.protection.outlook.com [IPv6:2a01:111:f403:c20c::4]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mail.protection.outlook.com", Issuer "DigiCert Cloud Services CA-1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Whfnk3pjmz3x6p for ; Sun, 11 Aug 2024 14:15:54 +0000 (UTC) (envelope-from hausen@punkt.de) Authentication-Results: mx1.freebsd.org; none ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=YRcjgxImmm8/nWyYT+l4IZZRjpEPi3gpjk/Oxj/B5Ui7Ory5asaSd/10uovkpnop/yWV7mnx1wxp5qGjV4shLESzN5M1u6cDmVlkleGdenWFv6Ph2bLoUrhHGULxIGbOXp9ogANeeSnKWzKamkvM6WfPYN0i+aQKQYq9sZo7eCD4ZI31MZTyvqaAYu9Qs/+Dxxl+YND6BGJIHEl5tqOOhUGupbQjaAszGAypmB8aCE34shY6qznYfttjTyJNpmZ4sWvZngjdoc8eJoaSWMbO1z1M11i56QF8iqweb8U8E2mI/498Uhn+0vqGHRwA4pcnhaEegdL8lJ/Qv2wENymvQw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=AWhXC8pPzhE7l/rl5N8hLyqyI5fKdLeZf9Y8T1i+WaE=; b=Oh9UawwFha0jnv44L3rNzkEJDfNj/ioMF/7/UYMBsbz5LAWpDj+0EMOuuc8+T5FLtpyIlE6/2X9FdvcvEq40/IwaP+IytN+39RAc7imMNKnX5XzXbg7bseddp/wnCe5uQVgEmRGZWOdCCnAsTNPKK7z/GbxiHRxwdXHkVDO2XtW7g1BvvqiPBMMXRherR+vtif4YtBsBIWsF9+2nq02+DbH5ZZ7xlg5G2Kb+OWmV8buW8Co3Gh3i1jL7exuA79kVqp7vwT8b3FS5MXi+wPyoRJH7CZh3yR9AD9fqzyOEC4VrEFaK0OXLiq9mvaFzIzPlhN6vE0lQoagtQoMcxgbqrg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=punkt.de; dmarc=pass action=none header.from=punkt.de; dkim=pass header.d=punkt.de; arc=none Received: from BEZP281MB3159.DEUP281.PROD.OUTLOOK.COM (2603:10a6:b10:2d::7) by FR4P281MB3589.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:d5::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7849.20; Sun, 11 Aug 2024 14:15:49 +0000 Received: from BEZP281MB3159.DEUP281.PROD.OUTLOOK.COM ([fe80::d3b4:7f52:df34:f8e7]) by BEZP281MB3159.DEUP281.PROD.OUTLOOK.COM ([fe80::d3b4:7f52:df34:f8e7%5]) with mapi id 15.20.7849.019; Sun, 11 Aug 2024 14:15:49 +0000 From: "Patrick M. Hausen" To: void CC: "freebsd-net@freebsd.org" Subject: Re: drop synfin Thread-Topic: drop synfin Thread-Index: AQHa6/HTMq0rX/UjTEmwIWeX4NoaCLIiEh4AgAADwoCAAAQegA== Date: Sun, 11 Aug 2024 14:15:49 +0000 Message-ID: <9E74F42B-1DA9-428A-A244-CDCC7DA65020@punkt.de> References: In-Reply-To: Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-publictraffictype: Email x-ms-traffictypediagnostic: BEZP281MB3159:EE_|FR4P281MB3589:EE_ x-ms-office365-filtering-correlation-id: 259613a0-e67e-40d8-635e-08dcba1019c1 x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|366016|376014|38070700018; x-microsoft-antispam-message-info: =?us-ascii?Q?FM7nnthiDSaG/erHAVZMbt9MYJneepNbrEElFOJWLG05l0Kx264mBUXLWNV5?= =?us-ascii?Q?dm+5n2p7FWmNDa90f7o+kjkaWs1bD+kqLIzmgbtX885U3/4KYoM5GENv4vH9?= =?us-ascii?Q?edXXj04/LpN66DtGULdKKZMn/CVU0e1pg/nU9uGU+zWZ3xBkjNZrRols3YLZ?= =?us-ascii?Q?rcCzCsmwCSz/llIcL1KFOPoa7UzGEh4G+aviydZVDhD1VdR05EqOUflnsDb7?= =?us-ascii?Q?3mni+amzyIboQH3uuD9074e0qI0aaCFTQOjjRcvGNbKDMmdN6Cu4Yb24xbtp?= =?us-ascii?Q?+2PV1vrrOrG83e3Vg56cfFixxuBgOZRyQLEHe9xHvR6y61x61EEDysdISBG8?= =?us-ascii?Q?AUNdKDvsaxzyfuTOfURNgRAjNTuFxf0qdYnQlxxJQSMYBkZ3L1yp+17rjoaZ?= =?us-ascii?Q?ahuNlg10aq1j7io4AniXodRosO6zPF3b0eCOnYLJ/1flVGX8esz++IeRmMQA?= =?us-ascii?Q?KCXwj+6kvD5xKOULXbiHjdJL2IeQ467c5c0JLybzGA8b4MCBjMDY8c+zhv3Z?= =?us-ascii?Q?DyFbqp/hVckAPfj55ptEtObHB2LJhIAAazUlQKztCfYzWA7yqMm/diQSNyJe?= =?us-ascii?Q?jNApdZjH2+bXJdNiOO6fw+Zz6TRhwKUDJ8zcvgbpfVt+j6UCsVMVzqvigs5n?= =?us-ascii?Q?WHHoccr2ekD1s989CNvH3xA5OOa6JIGA2csP6L6yOiH5FaJ1jVmCV9b9wcvq?= =?us-ascii?Q?eSS6YZtDNZkbDR5glWsrpUZiraa5B89oE5KMl6HB+JxhBl8nQHiLsAqhivqp?= =?us-ascii?Q?6Wb+yoLoD9GMUXMvq6D028nBT+b+T9MCc/UcJKF+2WVK8dPJ5qzP20I5Kgxs?= =?us-ascii?Q?uRmTtgZTz+9XpPltNJ56oyumaZ6EiQ3dfqXeOYZy8kfXgM8EsnvUz3/l7DL0?= =?us-ascii?Q?iuf2P6yLCPEgG8Ik9DvBE922XhcAZ+ADLlrxyOH9X644bGcKMm9/iIQVoacF?= =?us-ascii?Q?5zx61FCb9yt7BskONRf3pLyPsdgKiDCC4LNVRB/sTbdWzaFGWwfe8J13fLQQ?= =?us-ascii?Q?yr3BJXzp4EDTMHLtfPTxb677XiCeej1ruVczfvQi48MhA42ny+Zi4CPA+dIl?= =?us-ascii?Q?uILPFSn6vEgEp4zUWWQ+FBUt/tfcJO0F14kbR6ZpQiq2vgkGwDm5oPny2tez?= =?us-ascii?Q?uLgJdrHKGeVSwRjrudnqmULSy1jkTW8B8rmStWGyenJtW8GPIauI1bt8JG4a?= =?us-ascii?Q?9wphr17xpqp1xZ7onZjsHEdsX7qkrsPwz6Dvrcj4TgttCt5+7rglzHMqCscS?= =?us-ascii?Q?ivoJ+2WvyYoIpv06+kNPwg148yIBzb2/TLc1/NvPXCS00X82XL0SWqHT7pmF?= =?us-ascii?Q?7z4s3az84TokD0ECzhvYLo8CJSBZLQgffORZCQ8S9FjAfKkzbnH0pMe7zWXC?= =?us-ascii?Q?ViZrwdM=3D?= x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:BEZP281MB3159.DEUP281.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(366016)(376014)(38070700018);DIR:OUT;SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?us-ascii?Q?uQyqM2xXqemvI5WwujzmSIutwJfVIEtGf4AboONdvOjkDYHh11HXRxWOJDjW?= =?us-ascii?Q?6POqbjQ3V66jA/dUX/tiNeuCR1jH7temfDkGNkHzptLtxXtZUyy8Kefwco9d?= =?us-ascii?Q?XcQxmk4/OZoOzybLS5ZHbdcP0L3d3qeJgn23zCwZxzvSWjkWdxcT5A+zh2/4?= =?us-ascii?Q?LB3O6VlqE7NazJ0VqsErYIjqEbpCoZ+r4XwMB4LkdRmk5RU3OLiyGY4+UC4j?= =?us-ascii?Q?XOokipqmdZ68JD3yEq2PZl1ecADkxd0/3M1hSlgCfGP/1ulOAM+NmF5L9cjn?= =?us-ascii?Q?h1SowyM0M3OgQo5GAqOmJeGp5gXOG6tqke4AVjnKKgCoFf969aWAOVx6hB0M?= =?us-ascii?Q?RBJyb3VWR+TWfm9BJC9dx0L+Guo3HH/YJRDpoGqe5Cp568z3HisvYPCOcjH4?= =?us-ascii?Q?RxXItWxueH1yrFcpp3JYBrtT7sos99ObAghQyeDxluAlLujiQky24kms6Svn?= =?us-ascii?Q?zG2pQ3DJcynK4zSEqpIGLnfTwqetqbE1YQGplXMO7FnPv8+Hvf8FsZLT9AWd?= =?us-ascii?Q?sEcPfQXy6RiLewx0Bfs0NIzbnVkZFB0NoB901TUGUcOFgUgBwgm3fdevrsb8?= =?us-ascii?Q?XRbgH0lvlbJOTYQxiGUxFABK8WFuH6GZs209jvGvTbEnrj+J9i61HfcXL04w?= =?us-ascii?Q?DN8ROl+fJouhFod6zVU5fRrr1vjNEjuvMkWvZyyTn3zyOsDjnruDFZThsnlt?= =?us-ascii?Q?Xkey0SzcdjaCyr5X9wlsKlzCB9hTvYZtmHDy10vhf4Pihj39TjL7YeHLt36M?= =?us-ascii?Q?8woPX2/ADMO51d8emqxgyhoEBZshMuXKrp1pjkpoRhj7rnlDvpSoN3DXPAgr?= =?us-ascii?Q?IlBqe14nUHsN0WtGoJIrI8VkI4tfTPCz6Oat1uvqnkVrUvP62///abofOF+9?= =?us-ascii?Q?2UEFTWNoftDKMRjkPRpiBGXcZ4PB+agKslUGWmFLJzDZanR92lUFH63w/hG2?= =?us-ascii?Q?dQmiwYMWrqz3k84kjRaguAwNX6ArNHgzaz3o94ohHI5u+cHNl901uY6isAty?= =?us-ascii?Q?v2xUxQkOo0lVO2rkDffn+p2eBe9DQ9Gem9juMXrEf49rzHv2ChdOwX6M6PfW?= =?us-ascii?Q?1rwXF+I2kw74XKV/0XRzlhICpB2AZcpxf3T5vc3N3P6eyXrhLaWEOnxEh8HW?= =?us-ascii?Q?0vs3U8/JH+1PRQ6ApMZO0V6Haxipnl1L6dOxOOm7yzcsFzqduQ6z2eukk/jZ?= =?us-ascii?Q?uUkf+QGFF9BZOSDs+CvZ3KsKcEuXVq9scNzVjChnDdzQWhaNHOPKumvJiAqY?= =?us-ascii?Q?uq9i7E1AIkRebd2GcTcni4Dy/5pDSAnQ8E38UoFeOQGUa91MHjTXvGXaQOts?= =?us-ascii?Q?YrrNvN3UdjdnmveplY2Plr0QG5fiFKwvGEQx8qbQ1UFN0Q6iYcLbQcR5R00r?= =?us-ascii?Q?0efl/lK549kb3R3NKTU5zT4jVTi4+5zwQwzEuUmvskMZc4zyqs4Eq2RxRkq/?= =?us-ascii?Q?0Xey7p8Su3Zw4h5k/lXRqg6S8dtiUqUFHB5+9nb9bWMHnVtOKZwqjreKzWfQ?= =?us-ascii?Q?jAkag23AuXMnhZRQ645/uC+7Br37Wctem7VeSYTZuOftMDQ49JrllYL6/wOW?= =?us-ascii?Q?LC1wKkY178EipuA6usLA/1/PsJGaLuy+FObyPRvhGfhuqhB6e+Ai4x83GkrI?= =?us-ascii?Q?JYMxsSjV88LrP6ZBJK1y4HHEbcGRApDVu44XgEyrtm0y?= Content-Type: text/plain; charset="us-ascii" Content-ID: <95C27F198A31EF4DB8DDA83B5408BFC5@DEUP281.PROD.OUTLOOK.COM> Content-Transfer-Encoding: quoted-printable List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 X-OriginatorOrg: punkt.de X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BEZP281MB3159.DEUP281.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: 259613a0-e67e-40d8-635e-08dcba1019c1 X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Aug 2024 14:15:49.3643 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: d1aa1808-3734-45fc-a490-f8ba49028756 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: jHkXIxAVq6K746crGKzLEi1gskteTpGQsjyiRMTuuWXmDRfBDPg5xKTHGV29SrTg X-MS-Exchange-Transport-CrossTenantHeadersStamped: FR4P281MB3589 X-Spamd-Bar: ---- X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:8075, ipnet:2a01:111:f000::/36, country:US] X-Rspamd-Queue-Id: 4Whfnk3pjmz3x6p Hi all, > Am 11.08.2024 um 16:00 schrieb void : >=20 > Hi, thank you for your response >=20 > On Sun, Aug 11, 2024 at 09:47:28AM -0400, Michael Sierchio wrote: >> sysrc is for editing rc files, and that's not what you want to do. >>=20 >> you may manually set the MIB with sysctl net.inet.tcp.drop_synfin=3D1 or= you >> can put this line in /etc/sysctl.conf >>=20 >> net.inet.tcp.drop_synfin=3D1 >=20 > Yes. The reason I'm asking is because I've found instructions > to do one or the other. The sysctl method is what I'd prefer. using sysrc tcp_drop_synfin=3DYES configures the system to perform a sysctl net.inet.tcp.drop_synfin=3D1 at every boot. Simple as that. Placing the sysctl line into /etc/sysctl.conf will achieve the same. I don't know why there is an "official" rc.conf valure for this particular sysctl and not for the gaziliion of other ones available. Probably just like: sysrc gateway_enable=3DYES vs. sysctl net.inet.ip.forwarding=3D1 Historical reasons :-) Kind regards, Patrick