Date: Sat, 2 Sep 2000 17:50:02 -0700 From: Dragos Ruiu <dr@kyx.net> To: Bill Fumerola <billf@chimesnet.com>, Nicolas <list@rachinsky.de> Cc: freebsd-security@FreeBSD.ORG Subject: Re: ipfw and fragments Message-ID: <00090217534118.20066@smp.kyx.net> In-Reply-To: <20000901170437.J33771@jade.chc-chimes.com> References: <007a01c01457$3b9eff80$e4aa603e@gottt> <20000901170437.J33771@jade.chc-chimes.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 01 Sep 2000, Bill Fumerola wrote: > On Fri, Sep 01, 2000 at 10:56:41PM +0200, Nicolas wrote: > > Is there a way to make ipfw to reassemble fragmented ip packets before passing them through the rules? > > No. The relevant bits are only in the first packet. > It could be made to reassemble them, but it would incurr a performance hit. cheers, --dr -- Dragos Ruiu <dr@dursec.com> dursec.com ltd. / kyx.net - we're from the future pgp fingerprint: 18C7 E37C 2F94 E251 F18E B7DC 2B71 A73E D2E8 A56D pgp key: http://www.dursec.com/drkey.asc To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?00090217534118.20066>