Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 26 Jun 2000 18:41:47 -0400 (EDT)
From:      "Herbert J. McNew" <herb@cais.net>
To:        freebsd-security@freebsd.org
Subject:   RE: FreeBSD Security Advisory: FreeBSD-SA-00:23.ip-options
Message-ID:  <Pine.BSO.4.21.0006261838550.31222-100000@molybdenum.systems.cais.net>
In-Reply-To: <712384017032D411AD7B0001023D799B07C8D7@SN1EXCHMBX>

next in thread | previous in thread | raw e-mail | index | archive | help
TWIMC,

	An easy way around this DoS (if you don't need ip options o your
network) is the following ipf rule.  This will only work with ipf, thought
I'm sure someone out there can translate it into ipfw...

block in quick from any to any with ipopts

enjoy.

_____________________ 
Herb McNew
Systems Administrator
CAIS Internet
(703) 247-6270
herb@cais.net




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSO.4.21.0006261838550.31222-100000>