From owner-freebsd-questions@FreeBSD.ORG  Fri Sep 16 14:03:08 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 926EF16A41F
	for <freebsd-questions@freebsd.org>;
	Fri, 16 Sep 2005 14:03:08 +0000 (GMT)
	(envelope-from modelt20@canada.com)
Received: from canada.com (smtp-3.vancouver.ipapp.com [216.152.192.57])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 5C48143D48
	for <freebsd-questions@freebsd.org>;
	Fri, 16 Sep 2005 14:03:08 +0000 (GMT)
	(envelope-from modelt20@canada.com)
Received: from canada.com ([216.152.192.56]) by smtp-3.vancouver.ipapp.com ;
	Fri, 16 Sep 2005 07:03:02 -0700
Sender: modelt20@canada.com
From: "Boris Karloff" <modelt20@canada.com>
To: Bob Hall <rjhjr@cox.net>,freebsd-questions@freebsd.org
X-Mailer: Quality Web Email v3.1m, http://netwinsite.com/refw.htm
X-Originating-IP: 71.29.66.64
Date: Fri, 16 Sep 2005 09:03:02 -0500
Message-id: <432ad096.c1.4b9e.28106@canada.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
X-Country: CA
Cc: 
Subject: Re: ct Re: NMAP probing of network ports
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 16 Sep 2005 14:03:08 -0000

Thank you for your reply.

As you can see from my first message, blackhole did not
work.

Harold

On Fri, Sep 16, 2005 at 07:36:36AM -0500, Boris Karloff
wrote:
> It appears that when FreeBSD is sent an invalid packet
> without the SYN or ACK bits set, it responds with a RESET
> reply regardless of the ipfw rules. It appears this is one
> of the things nmap is exploiting.
> 
> Any suggestions on how to modify this behavior?

man blackhole
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"freebsd-questions-unsubscribe@freebsd.org"


----------------------------------------
Upgrade your account today for increased storage; mail
forwarding or POP enabled e-mail with automatic virus
scanning. Visit
http://www.canada.com/email/premiumservices.html for more
information.