From owner-freebsd-security Thu May 31 13: 4:34 2001 Delivered-To: freebsd-security@freebsd.org Received: from alpha.netvision.net.il (alpha.netvision.net.il [194.90.1.13]) by hub.freebsd.org (Postfix) with ESMTP id D05BF37B424 for ; Thu, 31 May 2001 13:04:28 -0700 (PDT) (envelope-from lirandb@netvision.net.il) Received: from a ([213.57.143.184]) by alpha.netvision.net.il (8.9.3/8.8.6) with SMTP id XAA04188 for ; Thu, 31 May 2001 23:04:27 +0300 (IDT) Message-ID: <009401c0ea15$518a3a00$b88f39d5@a> From: "Liran Dahan" To: Subject: Re: Limiting TCP RST Response Packets Date: Thu, 31 May 2001 23:04:44 +0200 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0091_01C0EA26.14D16D20" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2919.6600 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6600 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org This is a multi-part message in MIME format. ------=_NextPart_000_0091_01C0EA26.14D16D20 Content-Type: text/plain; charset="windows-1255" Content-Transfer-Encoding: quoted-printable I saw blackhole(4) but i dont really understand it..?=20 is it useful? And if i use firewall and filter-prohib tcp packets, then = what? >blackhole makes more sense i think. see blackhole(4) > >rohrbach@WM:datasink[~]19% cat /etc/sysctl.conf=20 >net.inet.tcp.blackhole=3D2 >net.inet.udp.blackhole=3D1 > >/k > >Rob Simmons(rsimmons@wlcg.com)@2001.05.31 >14:46:09 +0000: ------=_NextPart_000_0091_01C0EA26.14D16D20 Content-Type: text/html; charset="windows-1255" Content-Transfer-Encoding: quoted-printable
I saw blackhole(4) but i dont really = understand=20 it..? 
 is it useful? And if i use = firewall and=20 filter-prohib tcp packets, then what?
 
>blackhole makes more sense i think. = see=20 blackhole(4)
>
>rohrbach@WM:datasink[~]19% cat = /etc/sysctl.conf=20
>net.inet.tcp.blackhole=3D2
>net.inet.udp.blackhole=3D1
>
>/k
>
>Rob Simmons(rsimmons@wlcg.com)@2001.05.31 = >14:46:09=20 +0000:
------=_NextPart_000_0091_01C0EA26.14D16D20-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message