From owner-freebsd-stable Sun Feb 25 4:38: 9 2001 Delivered-To: freebsd-stable@freebsd.org Received: from smtp011.mail.yahoo.com (smtp011.mail.yahoo.com [216.136.173.31]) by hub.freebsd.org (Postfix) with SMTP id 152D637B401 for ; Sun, 25 Feb 2001 04:38:06 -0800 (PST) (envelope-from neve_ripe@yahoo.com) Received: from f2f.tsua.net (HELO never) (212.40.34.58) by smtp.mail.vip.sc5.yahoo.com with SMTP; 25 Feb 2001 12:38:05 -0000 X-Apparently-From: Date: Sun, 25 Feb 2001 14:37:57 +0200 From: Alexandr Kovalenko X-Mailer: The Bat! (v1.49) UNREG / CD5BF9353B3B7091 Reply-To: Alexandr Kovalenko Organization: UIC Group X-Priority: 3 (Normal) Message-ID: <15867369422.20010225143757@yahoo.com> To: Dag-Erling Smorgrav Cc: Alex Hayward , freebsd-stable@FreeBSD.ORG Subject: Re[2]: ipfw drop syn+fin In-reply-To: References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Hello Dag-Erling, Sunday, February 25, 2001, 2:30:44 PM, you wrote: DES> Alex Hayward writes: >> Oh, and nothing that I've found supports it apart from FreeBSD; which has >> it turned off by default. I'd be interested to know if anyone knows any >> different... DES> Linux supports it, but poorly (though this may have changed in 2.4). DES> But you are correct in that it is very little used, simply because in DES> these HTTP/1.1 days there's very little you can do that will fit in a DES> single TCP segment. So, as far as I can see there is no risk of turning up TCP_DROP_SYNFIN on my webserver. I have minimum size of 1 file on my web about 1Kb, most of the files are ~20-30-40 kb, will it be safe to do drop synfin? (sorry, if I misunderstood you..) -- Best regards, Alexandr mailto:neve_ripe@yahoo.com _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message