Date: Sun, 25 Feb 2001 14:37:57 +0200 From: Alexandr Kovalenko <neve_ripe@yahoo.com> To: Dag-Erling Smorgrav <des@ofug.org> Cc: Alex Hayward <xelah@xelah.com>, freebsd-stable@FreeBSD.ORG Subject: Re[2]: ipfw drop syn+fin Message-ID: <15867369422.20010225143757@yahoo.com> In-Reply-To: <xzpelwnj66j.fsf@flood.ping.uio.no> References: <Pine.LNX.4.10.10102231024230.15158-100000@sphinx.mythic-beasts.com> <xzpelwnj66j.fsf@flood.ping.uio.no>
next in thread | previous in thread | raw e-mail | index | archive | help
Hello Dag-Erling, Sunday, February 25, 2001, 2:30:44 PM, you wrote: DES> Alex Hayward <xelah@xelah.com> writes: >> Oh, and nothing that I've found supports it apart from FreeBSD; which has >> it turned off by default. I'd be interested to know if anyone knows any >> different... DES> Linux supports it, but poorly (though this may have changed in 2.4). DES> But you are correct in that it is very little used, simply because in DES> these HTTP/1.1 days there's very little you can do that will fit in a DES> single TCP segment. So, as far as I can see there is no risk of turning up TCP_DROP_SYNFIN on my webserver. I have minimum size of 1 file on my web about 1Kb, most of the files are ~20-30-40 kb, will it be safe to do drop synfin? (sorry, if I misunderstood you..) -- Best regards, Alexandr mailto:neve_ripe@yahoo.com _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?15867369422.20010225143757>