Date: Sat, 2 Jul 2005 22:03:48 -0400 From: Garrett Wollman <wollman@csail.mit.edu> To: Jesper Wallin <jesper@www.hackunite.net> Cc: freebsd-security@FreeBSD.ORG Subject: packets with syn/fin vs pf_norm.c Message-ID: <17095.18308.135102.939517@khavrinen.csail.mit.edu> In-Reply-To: <42C70FED.8080003@hackunite.net> References: <42C70FED.8080003@hackunite.net>
next in thread | previous in thread | raw e-mail | index | archive | help
<<On Sun, 03 Jul 2005 00:06:37 +0200, Jesper Wallin <jesper@www.hackunite.net> said: > First of all, I know that not dropping SYN/FIN isn't really a big deal, it > just makes no sense. But since it doesn't make any sense, I don't see > the reason why not to discard them. Perhaps because you are under the erroneous impression that such packets are nonsensical. -GAWollman
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?17095.18308.135102.939517>