From owner-freebsd-questions  Mon Jan  8 12:29:30 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from yertle.kciLink.com (yertle.kciLink.com [208.184.13.195])
	by hub.freebsd.org (Postfix) with ESMTP id A8C4937B7D9
	for <questions@FreeBSD.ORG>; Mon,  8 Jan 2001 11:48:30 -0800 (PST)
Received: from onceler.kciLink.com (onceler.kciLink.com [208.184.13.196])
	by yertle.kciLink.com (Postfix) with ESMTP
	id E4B5F2E440; Mon,  8 Jan 2001 14:48:29 -0500 (EST)
Received: (from khera@localhost)
	by onceler.kciLink.com (8.11.1/8.11.1) id f08JmTW62964;
	Mon, 8 Jan 2001 14:48:29 -0500 (EST)
	(envelope-from khera)
From: Vivek Khera <khera@kciLink.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-ID: <14938.6541.791836.221490@onceler.kciLink.com>
Date: Mon, 8 Jan 2001 14:48:29 -0500
To: Jonathan Chen <jonathan.chen@itouch.co.nz>
Cc: questions@FreeBSD.ORG
Subject: Re: ipfw fragments and connections to port 0
In-Reply-To: <20010109083019.B14318@itouchnz.itouch>
References: <14938.97.366645.802181@onceler.kciLink.com>
	<20010109083019.B14318@itouchnz.itouch>
X-Mailer: VM 6.88 under 21.1 (patch 12) "Channel Islands" XEmacs Lucid
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

>>>>> "JC" == Jonathan Chen <jonathan.chen@itouch.co.nz> writes:

JC> IIRC, this is generated by the rule that discards IP fragments with a
JC> fragment offset of one. From the ipfw(8) manual:

Yes, that does help.  At least I don't feel like I'm losing visitors
to my service.

Thanks.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message