From owner-freebsd-questions@FreeBSD.ORG Thu Aug 7 19:55:27 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id AA233106566B for ; Thu, 7 Aug 2008 19:55:27 +0000 (UTC) (envelope-from kalin@el.net) Received: from mail.el.net (mail.el.net [64.81.218.253]) by mx1.freebsd.org (Postfix) with ESMTP id E39D28FC22 for ; Thu, 7 Aug 2008 19:55:26 +0000 (UTC) (envelope-from kalin@el.net) Received: (qmail 57744 invoked by uid 1008); 7 Aug 2008 21:01:32 -0000 Received: from unknown (HELO kalins-macbook-pro.local) (kalin@el.net@74.1.12.115) by mail.el.net with ESMTPA; 7 Aug 2008 21:01:32 -0000 Message-ID: <489B532D.30106@el.net> Date: Thu, 07 Aug 2008 15:55:25 -0400 From: kalin m User-Agent: Thunderbird 2.0.0.16 (Macintosh/20080707) MIME-Version: 1.0 To: Chuck Swiger References: <489A8EA3.5030102@el.net> <489B3FFD.308@el.net> <0C465144-E873-4D87-B22E-4C5F6CB936B2@mac.com> In-Reply-To: <0C465144-E873-4D87-B22E-4C5F6CB936B2@mac.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-questions@freebsd.org Subject: Re: Remote host replies to SYN+FIN X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Aug 2008 19:55:27 -0000 thanks... or something like it... i'll try... Chuck Swiger wrote: > On Aug 7, 2008, at 11:33 AM, kalin m wrote: >> does anybody have any idea how to resolve this? >> >> thanks.. >> >> kalin m wrote: >>> hi all... >>> after setting up a pf rule set on one of newly installed freebsd 7 i >>> did a scan with nessus 3 on that machine >>> >>> the result i got was like this one: >>> http://www.nessus.org/plugins/index.php?view=single&id=11618 how do >>> 'fix' it using pf?... > > Add a pf rule like to pf.conf: > > block in proto tcp from any flags SF/SF > > ...? >