Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 12 Apr 1997 12:20:05 +1000 (EST)
From:      Darren Reed <avalon@coombs.anu.edu.au>
To:        danny@panda.hilink.com.au (Daniel O'Callaghan)
Cc:        adam@veda.is, hackers@freebsd.org
Subject:   Re: kern/3244: ipfw flush closes connections
Message-ID:  <199704120228.TAA09133@freefall.freebsd.org>
In-Reply-To: <Pine.BSF.3.91.970411155937.10264m-100000@panda.hilink.com.au> from "Daniel O'Callaghan" at Apr 11, 97 04:02:28 pm

next in thread | previous in thread | raw e-mail | index | archive | help
In some mail from Daniel O'Callaghan, sie said:
> 
> 
> 
> On Fri, 11 Apr 1997, Adam David wrote:
> 
> > This is also weird...
> > 
> > 'sh /etc/rc.firewall' invoked from a telnet or rlogin connection will break
> > the connection, but if it is invoked from the console instead the network
> > login connection stays open.
> 
> Have you read my earlier e-mail?  This occurs because if you leave out 
> the '-q' option 'flush' says "Flushed all rules".  But when the tcp 
> packets come to be sent, and error "Permission denied" is return, so 
> telnetd/rlogind quite, kernel resets connection and the rest of 
> rc.firewall is probably not executed.

Hmmm, if it returned EHOSTUNREACH, would that be as bad as EPERM ?

Darren



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199704120228.TAA09133>