Date: Wed, 15 Jan 2003 00:21:16 -0800 (PST) From: Josh Brooks <user@mail.econolodgetulsa.com> To: freebsd-hackers@freebsd.org Subject: simple tcp question (syn, no mss) Message-ID: <20030115002040.T39623-100000@mail.econolodgetulsa.com>
next in thread | raw e-mail | index | archive | help
Will I ever see a _legitimate_ packet in the wild that is a SYN, and has no MSS ? If the answer is no, then is this a good rule to block those: ipfw add 00001 deny tcp from any to any tcpflags syn tcpoptions !mss Or is this one better: ipfw add 00002 deny tcp from any to any setup tcpoptions !mss ----- I am simply trying to place a rule which blocks those packets and does not deny _any_ legitimate traffic (I don't consider nmapping to be legit for this discussion) - this is all provided that I am correct that there are no _legitimate_ packets in the wild that have a SYN and no MSS. thanks. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030115002040.T39623-100000>