Date: Tue, 2 Mar 2004 19:33:14 +0100 From: Danny Pansters <danny@ricin.com> To: freebsd-questions@freebsd.org Cc: "Shaun T. Erickson" <ste@ste-land.com> Subject: Re: How do I test for NO tcp flags being set, in ipfilter? (repost) Message-ID: <200403021933.14816.danny@ricin.com> In-Reply-To: <4044C412.1070207@ste-land.com> References: <4044C412.1070207@ste-land.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tuesday 02 March 2004 18:27, Shaun T. Erickson wrote:
> How do I test for NO tcp flags being set, in ipfilter?
You can filter on TCP flags but seems to me what you really mean is how to
check for no TCP options ("nop") rather than no flags:
'with opt nop' is a syntax that should work.
WRT flags, it's my understanding that every TCP packet has at least the A or S
flag set.
HTH,
Dan
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200403021933.14816.danny>