From owner-freebsd-questions@FreeBSD.ORG  Fri Sep 16 13:19:13 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id A130C16A420
	for <freebsd-questions@freebsd.org>;
	Fri, 16 Sep 2005 13:19:13 +0000 (GMT) (envelope-from rjhjr@cox.net)
Received: from eastrmmtao02.cox.net (eastrmmtao02.cox.net [68.230.240.37])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 0931F43D45
	for <freebsd-questions@freebsd.org>;
	Fri, 16 Sep 2005 13:19:12 +0000 (GMT) (envelope-from rjhjr@cox.net)
Received: from localhost ([68.230.186.138]) by eastrmmtao02.cox.net
	(InterMail vM.6.01.05.02 201-2131-123-102-20050715) with ESMTP
	id <20050916131911.LUPV20229.eastrmmtao02.cox.net@localhost>
	for <freebsd-questions@freebsd.org>; Fri, 16 Sep 2005 09:19:11 -0400
Date: Fri, 16 Sep 2005 09:19:11 -0400
From: Bob Hall <rjhjr@cox.net>
To: freebsd-questions@freebsd.org
Message-ID: <20050916131911.GA36475@kongemord.krig.net>
Mail-Followup-To: Bob Hall <rjhjr@cox.net>, freebsd-questions@freebsd.org
References: <432abc54.2b3.6a6c.3021@canada.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <432abc54.2b3.6a6c.3021@canada.com>
User-Agent: Mutt/1.4.2.1i
Subject: Re: ct 	Re: NMAP probing of network ports
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 16 Sep 2005 13:19:13 -0000

On Fri, Sep 16, 2005 at 07:36:36AM -0500, Boris Karloff wrote:
> It appears that when FreeBSD is sent an invalid packet
> without the SYN or ACK bits set, it responds with a RESET
> reply regardless of the ipfw rules. It appears this is one
> of the things nmap is exploiting.
> 
> Any suggestions on how to modify this behavior?

man blackhole