Date: Sun, 6 Jul 1997 20:35:58 PDT From: Bill Fenner <fenner@parc.xerox.com> To: nsayer@quack.kfu.com Cc: fenner@freebsd.org (Bill Fenner), joerg@freebsd.org, jkh@freebsd.org, hackers@freebsd.org Subject: Re: kern/3446 Message-ID: <97Jul6.203602pdt.177512@crevenia.parc.xerox.com> In-Reply-To: Your message of "Sun, 06 Jul 97 15:39:44 PDT." <199707062239.PAA26655@quack.kfu.com>
next in thread | previous in thread | raw e-mail | index | archive | help
nsayer@quack.kfu.com wrote: >I don't know how so many duplicates got made. I believe I sent this >in a total of twice. The GNATS system was going through a strange period right around the time that this PR was submitted, and a lot of PR's got duplicated. >I must protest in the strongest possible terms the closure without >action of this PR. I'm sorry, I erred in not including the current status when I closed the PR. I believe you will find that both my suggestion (sending a RST) and your suggestion (sending a host unreachable) are possible using the new ipfw code in the kernel; the piece of code that you suggested patching now looks like icmp_error(*m, ICMP_UNREACH, rule->fw_reject_code, 0L, 0); implying that you can set fw_reject_code to ICMP_UNREACH_HOST if you want. It should probably normally be set to ICMP_UNREACH_FILTER_PROHIB (which doesn't have the ill effects that ICMP_UNREACH_PORT does on SunOS). Bill
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?97Jul6.203602pdt.177512>