Date: 30 May 2001 03:24:47 +0200 From: Dag-Erling Smorgrav <des@ofug.org> To: "Liran Dahan" <lirandb@netvision.net.il> Cc: <freebsd-security@FreeBSD.ORG> Subject: Re: Syn+Fin (Setup) And TCP RST Message-ID: <xzpy9rftyqo.fsf@flood.ping.uio.no> In-Reply-To: <010f01c0e888$5ab3c120$b88f39d5@a> References: <010f01c0e888$5ab3c120$b88f39d5@a>
next in thread | previous in thread | raw e-mail | index | archive | help
"Liran Dahan" <lirandb@netvision.net.il> writes: > I've added those 2 options in my kernel long time ago: > options TCP_DROP_SYNFIN #drop TCP packets with SYN+FIN > options TCP_RESTRICT_RST #restrict emission of TCP RST They do nothing unless you also frob the accompanying sysctl variables. > If my speculations are true... Why those kernel options are used for? RTFM (rc.conf(5) in this case) DES -- Dag-Erling Smorgrav - des@ofug.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?xzpy9rftyqo.fsf>