From owner-freebsd-ipfw@FreeBSD.ORG  Mon Apr  7 04:36:03 2003
Return-Path: <owner-freebsd-ipfw@FreeBSD.ORG>
Delivered-To: freebsd-ipfw@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id E08B537B401
	for <freebsd-ipfw@FreeBSD.ORG>; Mon,  7 Apr 2003 04:36:02 -0700 (PDT)
Received: from mout2.freenet.de (mout2.freenet.de [194.97.50.155])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 11AA043FB1
	for <freebsd-ipfw@FreeBSD.ORG>; Mon,  7 Apr 2003 04:36:02 -0700 (PDT)
	(envelope-from ino-qc@spotteswoode.de.eu.org)
Received: from [194.97.50.135] (helo=mx2.freenet.de)
	by mout2.freenet.de with asmtp (Exim 4.14)
	id 192Uuv-0005UG-2L
	for freebsd-ipfw@FreeBSD.ORG; Mon, 07 Apr 2003 13:36:01 +0200
Received: from p3e9baafe.dip.t-dialin.net ([62.155.170.254]
	helo=spotteswoode.dnsalias.org)
	by mx2.freenet.de with asmtp (ID inode@freenet.de) (Exim 4.14 #2)
	id 192Uuu-0005Cf-LR
	for freebsd-ipfw@FreeBSD.ORG; Mon, 07 Apr 2003 13:36:00 +0200
Received: (qmail 3601 invoked by uid 0); 7 Apr 2003 11:35:59 -0000
Date: 7 Apr 2003 13:35:59 +0200
Message-ID: <adf2mteo.fsf@ID-23066.news.dfncis.de>
From: "clemens fischer" <ino-qc@spotteswoode.de.eu.org>
To: "Frans =?iso-8859-15?q?Gidl=F6f?=" <neko@skebo.ac>
In-Reply-To: <E06E4F19-6843-11D7-8C1F-00039351C496@skebo.ac> (Frans
 =?iso-8859-15?q?Gidl=F6f's?= message of "Sun, 6 Apr 2003 17:24:36 +0200")
References: <E06E4F19-6843-11D7-8C1F-00039351C496@skebo.ac>
User-Agent: Gnus/5.090017 (Oort Gnus v0.17) Emacs/21.3.50 (berkeley-unix)
MIME-Version: 1.0
Content-Type: text/plain; charset=latin-iso8859-9
Content-Transfer-Encoding: 8bit
cc: freebsd-ipfw@FreeBSD.ORG
Subject: Re: Prioritizing empty TCP ACKs
X-BeenThere: freebsd-ipfw@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: IPFW Technical Discussions <freebsd-ipfw.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>,
	<mailto:freebsd-ipfw-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ipfw>
List-Post: <mailto:freebsd-ipfw@freebsd.org>
List-Help: <mailto:freebsd-ipfw-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>,
	<mailto:freebsd-ipfw-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 07 Apr 2003 11:36:03 -0000

Frans Gidlöf <neko@skebo.ac>:

> So how do you catch one of those tcp-ack-no-payload packets with
> IPFW?.

AFAIK ipfw doesn't (yet?) have that iplen thing, but ipfw2 has it, or
will have it.  you might experiment with `tcpoptions ...' and
`established', though.  i don't want to do that, but am still
interested if these less powerful measures make a difference, so keep
us posted, please.

  clemens