From owner-freebsd-security Thu Nov 5 04:07:28 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id EAA00965 for freebsd-security-outgoing; Thu, 5 Nov 1998 04:07:28 -0800 (PST) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from mail.webspan.net (mail.webspan.net [206.154.70.7]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id EAA00960 for ; Thu, 5 Nov 1998 04:07:26 -0800 (PST) (envelope-from opsys@mail.webspan.net) Received: from orion.webspan.net (orion.webspan.net [206.154.70.5]) by mail.webspan.net (WEBSPAN/970608) with SMTP id HAA13505; Thu, 5 Nov 1998 07:07:14 -0500 (EST) Date: Thu, 5 Nov 1998 07:07:13 -0500 (EST) From: Open Systems Networking X-Sender: opsys@orion.webspan.net To: Andrew McNaughton cc: freebsd-security@FreeBSD.ORG Subject: Re: Amazing wonder packet Part 2. In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Ok its late. I re-read the post about this and now I grawk the whole point behind the comment: "However, if you have your ipfw lines not in the rule order, then some allows might be installed in the list of rules *before* the denies that precede them. In this situation, the race condition would allow a packet in that should not have been allowed in." The fix was inteded for this. And thats exactly what it fixes. I think I can goto bed now. Chris -- "You both seem to be ignoring the fact that the networking market is driven by so-called 'IT professionals' these days, most of whom can't tell the difference between an ARP and a carp." --Wes Peters ===================================| Open Systems FreeBSD Consulting. FreeBSD 3.0 is available now! | Phone: (402)573-9124 / ICQ # 20016186 -----------------------------------| 3335 N. 103 Plaza, Omaha, NE 68134 FreeBSD: The power to serve! | E-Mail: opsys@open-systems.net http://www.freebsd.org | Consulting, Network Engineering, Security ===================================| http://open-systems.net To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message