Date: Tue, 17 Aug 1999 08:55:23 +0200 From: Geoff Rehmet <geoffr@is.co.za> To: "'Warner Losh'" <imp@village.org>, Archie Cobbs <archie@whistle.com> Cc: brian@CSUA.Berkeley.EDU, current@FreeBSD.ORG Subject: RE: Dropping connections without RST Message-ID: <E3453EC6C52ED3118E7E0090275CD47CFFAFA7@isjhbex.is.co.za>
next in thread | raw e-mail | index | archive | help
> In message <199908170219.TAA01050@bubba.whistle.com> Archie > Cobbs writes: > : Not that easily.. how are you going to make ipfw dynamically know > : which ports have listeners and which don't? > > By filtering all RST packets? My view was that this is much simpler than filtering packets - never generate the packet. My guess is that it creates lower overheads. In some instances, I don't want to look at every packet (which in effect happens with a packet filter). Geoff. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?E3453EC6C52ED3118E7E0090275CD47CFFAFA7>