Date: Sat, 31 Jan 2004 13:39:24 +0000 From: Matthew Seaman <m.seaman@infracaninophile.co.uk> To: "J.D. Bronson" <jbronson@lonebandit.com> Cc: freebsd-questions@freebsd.org Subject: Re: tcp blackhole and ident Message-ID: <20040131133924.GB48307@happy-idiot-talk.infracaninophile.co.uk> In-Reply-To: <6.0.2.0.2.20040131072955.00b54ee8@cheyenne.wixb.com> References: <6.0.2.0.2.20040131072955.00b54ee8@cheyenne.wixb.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--qlTNgmc+xy1dBmNv Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sat, Jan 31, 2004 at 07:32:36AM -0600, J.D. Bronson wrote: > I have a question. I setup the following in sysctl.conf: >=20 > net.inet.tcp.blackhole=3D2 > net.inet.udp.blackhole=3D1 >=20 > ..Well this works, but now I have a new issue. > I run sendmail and as such, need to allow TCP 113 into this machine > and yet get CONNECTION REFUSED. - I dont want to run IDENT, but > need to still get the CONNECTION REFUSED... Run ipfw(8) or a similar firewall and set up a rule that sends an ICMP reject whenever it detects an incoming connection on port 113 as part of your firewall configuration. Eg. something like: 01600 reset tcp from any to me dst-port 113 setup Cheers, Matthew --=20 Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK --qlTNgmc+xy1dBmNv Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (FreeBSD) iD8DBQFAG7AMdtESqEQa7a0RApuCAJ91LncAH93Hx84148vCEbkDxf/OkACePZbo /7Xc9+AbaN2tdxDdiewXFbs= =W7zQ -----END PGP SIGNATURE----- --qlTNgmc+xy1dBmNv--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040131133924.GB48307>