Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 31 May 2001 23:04:44 +0200
From:      "Liran Dahan" <lirandb@netvision.net.il>
To:        <freebsd-security@freebsd.org>
Subject:   Re: Limiting TCP RST Response Packets
Message-ID:  <009401c0ea15$518a3a00$b88f39d5@a>

index | next in thread | raw e-mail

[-- Attachment #1 --]
I saw blackhole(4) but i dont really understand it..? 
 is it useful? And if i use firewall and filter-prohib tcp packets, then what?

>blackhole makes more sense i think. see blackhole(4)
>
>rohrbach@WM:datasink[~]19% cat /etc/sysctl.conf 
>net.inet.tcp.blackhole=2
>net.inet.udp.blackhole=1
>
>/k
>
>Rob Simmons(rsimmons@wlcg.com)@2001.05.31 >14:46:09 +0000:


[-- Attachment #2 --]
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=windows-1255" http-equiv=Content-Type>
<META content="MSHTML 5.00.2919.6307" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>I saw blackhole(4) but i dont really understand 
it..</FONT><FONT face=Arial size=2>?&nbsp;</FONT></DIV>
<DIV><FONT face=Arial size=2>&nbsp;is it useful? And if i use firewall and 
filter-prohib tcp packets, then what?</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Arial size=2>&gt;blackhole makes more sense i think. see 
blackhole(4)</FONT></DIV>
<DIV><FONT face=Arial size=2>&gt;</FONT></DIV>
<DIV><FONT face=Arial size=2>&gt;rohrbach@WM:datasink[~]19% cat /etc/sysctl.conf 
<BR>&gt;net.inet.tcp.blackhole=2<BR>&gt;net.inet.udp.blackhole=1</FONT></DIV>
<DIV><FONT face=Arial size=2>&gt;</FONT></DIV>
<DIV><FONT face=Arial size=2>&gt;/k</FONT></DIV>
<DIV><FONT face=Arial size=2>&gt;</FONT></DIV>
<DIV><FONT face=Arial size=2>&gt;Rob Simmons(<A 
href="mailto:rsimmons@wlcg.com">rsimmons@wlcg.com</A>)@2001.05.31 &gt;14:46:09 
+0000:<BR></FONT></DIV></BODY></HTML>
home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?009401c0ea15$518a3a00$b88f39d5>