Date: Mon, 1 Jan 2001 05:50:03 -0800 (PST) From: Jesper Skriver <jesper@skriver.dk> To: freebsd-bugs@FreeBSD.org Subject: Re: kern/23986: Update of "react to ICMP unreachables" code Message-ID: <200101011350.f01Do3P01960@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
The following reply was made to PR kern/23986; it has been noted by GNATS. From: Jesper Skriver <jesper@skriver.dk> To: Garrett Wollman <wollman@khavrinen.lcs.mit.edu> Cc: FreeBSD-gnats-submit@FreeBSD.ORG, security-officer@FreeBSD.org, phk@FreeBSD.org Subject: Re: kern/23986: Update of "react to ICMP unreachables" code Date: Mon, 1 Jan 2001 14:46:16 +0100 On Sun, Dec 31, 2000 at 04:02:15PM -0500, Garrett Wollman wrote: > <<On Sun, 31 Dec 2000 21:26:01 +0100 (CET), Jesper Skriver <jesper@skriver.dk> said: > > > We now let ICMP unreachables kill TCP sessions regardless of state, and all > > Cool! Bringing back a famous bug from 4.2BSD! ? If you read all what I wrote, it was only for ICMP administrative unreachables, that is someone put a filter in the path denying the traffic. Other unreachables will only kill sessions in SYN-SENT state, that is new sessions not setup yet. The above was what was agree'd upon when it was discussed at -hackers earlier. /Jesper -- Jesper Skriver, jesper(at)skriver(dot)dk - CCIE #5456 Work: Network manager @ AS3292 (Tele Danmark DataNetworks) Private: Geek @ AS2109 (A much smaller network ;-) One Unix to rule them all, One Resolver to find them, One IP to bring them all and in the zone to bind them. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200101011350.f01Do3P01960>