From owner-freebsd-net@FreeBSD.ORG  Mon Oct 20 17:37:40 2008
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id BF922106566B
	for <freebsd-net@freebsd.org>; Mon, 20 Oct 2008 17:37:40 +0000 (UTC)
	(envelope-from bright@elvis.mu.org)
Received: from elvis.mu.org (elvis.mu.org [192.203.228.196])
	by mx1.freebsd.org (Postfix) with ESMTP id B02528FC12
	for <freebsd-net@freebsd.org>; Mon, 20 Oct 2008 17:37:40 +0000 (UTC)
	(envelope-from bright@elvis.mu.org)
Received: by elvis.mu.org (Postfix, from userid 1192)
	id 7AB6C1A3C37; Mon, 20 Oct 2008 10:37:40 -0700 (PDT)
Date: Mon, 20 Oct 2008 10:37:40 -0700
From: Alfred Perlstein <alfred@freebsd.org>
To: freebsd-net@freebsd.org
Message-ID: <20081020173740.GK22503@elvis.mu.org>
References: <48F93051.6040808@nttmcl.com> <20081018090351.GA29876@verio.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20081018090351.GA29876@verio.net>
User-Agent: Mutt/1.4.2.3i
Subject: Re: Closing connection from an accept_filter(9)
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 20 Oct 2008 17:37:40 -0000

* David DeSimone <fox@verio.net> [081018 02:25] wrote:
> Eugene M. Kim <gene@nttmcl.com> wrote:
> >
> > Is it possible to close a connection from an accept filter, for
> > example, in order to prevent an incoming connection with a malformed
> > request body from ever reaching the userland?
> 
> How would you propose to find out what is in the request body without
> first accepting the connection?

By writing a custom accept filter! :)

-Alfred