Date: Thu, 14 Dec 2006 11:31:27 -0800 From: Julian Elischer <julian@elischer.org> To: Alexander Motin <mav@alkar.net> Cc: FreeBSD Net <freebsd-net@freebsd.org> Subject: Re: question for TCP gurus (in ipfw) Message-ID: <4581A68F.5010208@elischer.org> In-Reply-To: <4581566C.5070600@alkar.net> References: <1166066689.00653827.1166055601@10.7.7.3> <4581566C.5070600@alkar.net>
next in thread | previous in thread | raw e-mail | index | archive | help
Alexander Motin wrote: > Julian Elischer wrote: >> could we do either of: >> 1/ not set the ACK bit and just not do the extra work. Just send a >> reset? > > Reset packet MUST have valid sequence number. Else it will be rejected > as protection from DoS atack. Andre's reference explains it very well... thanks..
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4581A68F.5010208>