From owner-freebsd-bugs  Tue Jan 15 20:10:58 2002
Delivered-To: freebsd-bugs@hub.freebsd.org
Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21])
	by hub.freebsd.org (Postfix) with ESMTP
	id 192B437B405; Tue, 15 Jan 2002 20:10:54 -0800 (PST)
Received: (from cjc@localhost)
	by freefall.freebsd.org (8.11.6/8.11.6) id g0G487l74343;
	Tue, 15 Jan 2002 20:08:07 -0800 (PST)
	(envelope-from cjc)
Date: Tue, 15 Jan 2002 20:08:07 -0800 (PST)
From: <cjc@FreeBSD.org>
Message-Id: <200201160408.g0G487l74343@freefall.freebsd.org>
To: shadow@tty64.org, cjc@FreeBSD.org, freebsd-bugs@FreeBSD.org
Subject: Re: conf/33923: black hole ignored ports
Sender: owner-freebsd-bugs@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-bugs.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-bugs>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-bugs>
X-Loop: FreeBSD.org

Synopsis: black hole ignored ports

State-Changed-From-To: open->closed
State-Changed-By: cjc
State-Changed-When: Tue Jan 15 19:56:46 PST 2002
State-Changed-Why: 
Thanks for the patch, but if you want more complex "blackhole"
behavior, the right way to go is to set up firewalling, note the
"WARNING" section of blackhole(4).

  ipfw reset tcp from any to me 113 setup
  <more ports to be reset>
  ipfw drop tcp from any to me setup

Will pretty much do what you want.

http://www.FreeBSD.org/cgi/query-pr.cgi?pr=33923

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message