Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 28 Aug 2001 00:10:21 +0200
From:      Jesper Skriver <jesper@skriver.dk>
To:        Mike Silbersack <silby@silby.com>
Cc:        Scott Renfro <scott@renfro.org>, Barney Wolff <barney@databus.com>, freebsd-net@FreeBSD.ORG, Jonathan Lemon <jlemon@flugsvamp.com>, Bill Fenner <fenner@research.att.com>, Cory Scott <cory@crazypenguin.com>
Subject:   Re: Proposed change to icmp_may_rst induced ENETRESET
Message-ID:  <20010828001021.I65064@skriver.dk>
In-Reply-To: <Pine.BSF.4.30.0108271652040.96218-100000@niwun.pair.com>; from silby@silby.com on Mon, Aug 27, 2001 at 04:54:31PM -0400
References:  <20010827150923.L55723@skriver.dk> <Pine.BSF.4.30.0108271652040.96218-100000@niwun.pair.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Aug 27, 2001 at 04:54:31PM -0400, Mike Silbersack wrote:
> 
> On Mon, 27 Aug 2001, Jesper Skriver wrote:
> 
> > On Thu, Aug 23, 2001 at 06:23:31PM -0700, Scott Renfro wrote:
> > > You have a valid point that icmp_may_rst changes nmap's behavior, even
> > > with the proposed patch.  If you want nmap's historic behavior (admin
> > > prohib ==> filtered), then turning off icmp_may_rst works.  With
> > > icmp_may_rst turned on and the patch commited, you get the other
> > > behavior (admin prohib ==> closed).  Without the patch, nmap spews
> > > errors and would need a FreeBSD-specific change.
> >
> > I pretty much doesn't care, Jonathan, Bill, Mike what do you think ?
> >
> > /Jesper
> 
> Seems best to have icmp admin-prohibited return what a RST would, just to
> be compatible with the widest range of apps, IMHO.

Ack, committed to -current

/Jesper

-- 
Jesper Skriver, jesper(at)skriver(dot)dk  -  CCIE #5456
Work:    Network manager   @ AS3292 (Tele Danmark DataNetworks)
Private: FreeBSD committer @ AS2109 (A much smaller network ;-)

One Unix to rule them all, One Resolver to find them,
One IP to bring them all and in the zone to bind them.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010828001021.I65064>