From owner-freebsd-stable Thu Jan 20 22:29:17 2000 Delivered-To: freebsd-stable@freebsd.org Received: by hub.freebsd.org (Postfix, from userid 758) id 8825314E3C; Thu, 20 Jan 2000 22:29:13 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by hub.freebsd.org (Postfix) with ESMTP id 7E62B1CD5E0; Thu, 20 Jan 2000 22:29:13 -0800 (PST) (envelope-from kris@hub.freebsd.org) Date: Thu, 20 Jan 2000 22:29:13 -0800 (PST) From: Kris Kennaway To: Mikhail Teterin Cc: freebsd-security@FreeBSD.ORG, freebsd-stable@FreeBSD.ORG Subject: Re: bugtraq posts: stream.c - new FreeBSD exploit? In-Reply-To: <200001210531.AAA26807@rtfm.newton> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Fri, 21 Jan 2000, Mikhail Teterin wrote: > Can a similar rule be created for ipfw? Thanks! No, because ipfw doesn't keep connection state :( This is one of the big advantages of ipfilter over ipfw. People had talked about adding the ability, but nothing has come of it yet. Kris ---- "How many roads must a man walk down, before you call him a man?" "Eight!" "That was a rhetorical question!" "Oh..then, seven!" -- Homer Simpson To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message