From owner-freebsd-security  Thu Mar 15 14:12:36 2001
Delivered-To: freebsd-security@freebsd.org
Received: from ns.yogotech.com (ns.yogotech.com [206.127.123.66])
	by hub.freebsd.org (Postfix) with ESMTP id 29BD837B719
	for <security@FreeBSD.ORG>; Thu, 15 Mar 2001 14:12:32 -0800 (PST)
	(envelope-from nate@yogotech.com)
Received: from nomad.yogotech.com (nomad.yogotech.com [206.127.123.131])
	by ns.yogotech.com (8.9.3/8.9.3) with ESMTP id PAA13545;
	Thu, 15 Mar 2001 15:11:50 -0700 (MST)
	(envelope-from nate@nomad.yogotech.com)
Received: (from nate@localhost)
	by nomad.yogotech.com (8.8.8/8.8.8) id PAA07956;
	Thu, 15 Mar 2001 15:11:49 -0700 (MST)
	(envelope-from nate)
From: Nate Williams <nate@yogotech.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-ID: <15025.15908.270320.373266@nomad.yogotech.com>
Date: Thu, 15 Mar 2001 15:11:48 -0700 (MST)
To: Dag-Erling Smorgrav <des@ofug.org>
Cc: nate@yogotech.com (Nate Williams),
	Adam Laurie <adam@algroup.co.uk>, Ronan Lucio <ronan@melim.com.br>,
	security@FreeBSD.ORG
Subject: Re: Port 113
In-Reply-To: <xzpbsr2ptv7.fsf@flood.ping.uio.no>
References: <006b01c0ad38$39eed0a0$1401a8c0@tedm.placo.com>
	<099801c0ad7c$75b63800$2aa8a8c0@melim.com.br>
	<15025.5630.472269.543769@nomad.yogotech.com>
	<3AB1261F.23B8BE75@algroup.co.uk>
	<15025.10176.676792.32675@nomad.yogotech.com>
	<xzpbsr2ptv7.fsf@flood.ping.uio.no>
X-Mailer: VM 6.75 under 21.1 (patch 12) "Channel Islands" XEmacs Lucid
Reply-To: nate@yogotech.com (Nate Williams)
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

> > My local sendmail doesn't use *my* ident server, but remote sendmail
> > servers use *my* ident server, so using ident locally speeds up mail
> > transfers *to* my host.
> 
> No, the problem only arises if you drop TCP 113 SYNs to the floor
> instead of rejecting them (ipfw deny instead of ipfw reset); the
> server times out waiting for you to reply. If you send an RST or an
> ICMP UNREACH back, it'll give up immediately.

Hmm, I remember a long time ago where it was said (urban legend) that
even sending RST's confused older version of mail servers.

Running the 'fake' ident server hasn't caused any problems AFAIK. :) :)




Nate

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message