Date: Tue, 11 Jan 2000 17:04:31 +1100 (Australia/NSW) From: Darren Reed <avalon@coombs.anu.edu.au> To: jwyatt@rwsystems.net (James Wyatt) Cc: freebsd-security@FreeBSD.ORG Subject: Re: Ensuring packet defragmentation in FreeBSD? Message-ID: <200001110604.RAA07943@cairo.anu.edu.au> In-Reply-To: <Pine.BSF.4.10.10001062317370.24561-100000@bsdie.rwsystems.net> from "James Wyatt" at Jan 06, 2000 11:23:02 PM
next in thread | previous in thread | raw e-mail | index | archive | help
In some mail from James Wyatt, sie said: > > I've been looking at sevral programs to help test client setups and > learning how they work. I noticed in the nmap manpage, it states: > > "...this method won't get by packet filters and firewalls that > queue all IP fragments (like the CONFIG_IP_ALWAYS_DEFRAG option > in the Linux kernel),..." > > Does FreeBSD queue packet fragments and/or reassemble them in a way I can > detect this probing by fragmented packets? Which files should I look in? You don't really want to do this anyway...the current maintainer of the linux firewalling code has made some nasty comments about the side effects of this behaviour. Darren To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200001110604.RAA07943>