Date: Wed, 10 May 1995 19:15:56 +0200 (MET DST) From: Ollivier Robert <Ollivier.Robert@hsc.fr.net> To: freebsd-hackers@FreeBSD.org (FreeBSD Hackers' list) Subject: IP Firewall s/w for SunOS 4.1.x Message-ID: <199505101715.TAA10139@sidhe.hsc-sec.fr>
next in thread | raw e-mail | index | archive | help
FYI. ------- start of forwarded message ------- Newsgroups: comp.security.unix,comp.sys.sun.admin,comp.sys.sun.apps,comp.unix.bsd.netbsd.misc From: darrenr@arbld.unimelb.edu.au (Darren Reed) Subject: IP Firewall s/w for SunOS 4.1.x Organization: Computer Science, University of Melbourne, Australia Date: Wed, 10 May 1995 15:29:44 GMT I've just finished work on version 2.6 of my IP filter and I'm almost 100% happy with fragment handling - although it hasn't really changed since 2.5. For more details, see: http://cheops.anu.edu.au/~avalon/ip-filter.html ftp://coombs.anu.edu.au/pub/net/kernel/ip_fil2.6.tar.gz ...the % that isn't happy with fragment handling is that depending on the reassembly implementation, it may or may not be safe to filter on "established" (or any other) bits in the TCP header, regardless of whether they are present or not. Cheers, Darren ------- end of forwarded message ------- -- Ollivier ROBERT -=-=- Herve Schauer Consultants -=-=- roberto@hsc.fr.net -=-=-=-=-=- Support The Free UNIX Systems ! FreeBSD Linux NetBSD -=-=-=-=-=-
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199505101715.TAA10139>