Date: Tue, 22 Aug 1995 21:23:56 +0200 (MET DST) From: guido@gvr.win.tue.nl (Guido van Rooij) To: gary@palmer.demon.co.uk (Gary Palmer) Cc: imp@village.org, peter@haywire.dialix.com, freebsd-hackers@freebsd.org Subject: Re: IPFW and SCREEND Message-ID: <199508221923.VAA00855@gvr.win.tue.nl> In-Reply-To: <8296.809119018@palmer.demon.co.uk> from "Gary Palmer" at Aug 22, 95 08:16:58 pm
next in thread | previous in thread | raw e-mail | index | archive | help
Gary Palmer wrote: > > In message <199508221903.VAA00693@gvr.win.tue.nl>, Guido van Rooij writes: > >Just throw away *every* fragment that has as its start byte a byte in > >the TCP/IP header. (so smaller then 40) > > That'd be my opinion as well. Is there any DOCUMENTED & VALID reason > for having a fragment start with a byte offset into the header? Do you care? I think it is valid to happen. I dont think it is going to happen during normal traffic.. So I'll just block it. -Guido
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199508221923.VAA00855>