Date: Fri, 1 Sep 2000 17:04:37 -0400 From: Bill Fumerola <billf@chimesnet.com> To: Nicolas <list@rachinsky.de> Cc: freebsd-security@FreeBSD.ORG Subject: Re: ipfw and fragments Message-ID: <20000901170437.J33771@jade.chc-chimes.com> In-Reply-To: <007a01c01457$3b9eff80$e4aa603e@gottt>; from list@rachinsky.de on Fri, Sep 01, 2000 at 10:56:41PM %2B0200 References: <007a01c01457$3b9eff80$e4aa603e@gottt>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Sep 01, 2000 at 10:56:41PM +0200, Nicolas wrote:
> Is there a way to make ipfw to reassemble fragmented ip packets before passing them through the rules?
No. The relevant bits are only in the first packet.
--
Bill Fumerola - Network Architect, BOFH / Chimes, Inc.
billf@chimesnet.com / billf@FreeBSD.org
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000901170437.J33771>