From owner-freebsd-current Tue Aug 17 0: 2:29 1999 Delivered-To: freebsd-current@freebsd.org Received: from gndrsh.dnsmgr.net (GndRsh.dnsmgr.net [198.145.92.4]) by hub.freebsd.org (Postfix) with ESMTP id 2AD191562F for ; Tue, 17 Aug 1999 00:02:20 -0700 (PDT) (envelope-from freebsd@gndrsh.dnsmgr.net) Received: (from freebsd@localhost) by gndrsh.dnsmgr.net (8.9.3/8.9.3) id AAA12199; Tue, 17 Aug 1999 00:00:01 -0700 (PDT) (envelope-from freebsd) From: "Rodney W. Grimes" Message-Id: <199908170700.AAA12199@gndrsh.dnsmgr.net> Subject: Re: Dropping connections without RST In-Reply-To: <199908170646.AAA36916@harmony.village.org> from Warner Losh at "Aug 17, 1999 00:46:04 am" To: imp@village.org (Warner Losh) Date: Tue, 17 Aug 1999 00:00:01 -0700 (PDT) Cc: current@FreeBSD.ORG X-Mailer: ELM [version 2.4ME+ PL54 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > In message <199908170219.TAA01050@bubba.whistle.com> Archie Cobbs writes: > : Not that easily.. how are you going to make ipfw dynamically know > : which ports have listeners and which don't? > > By filtering all RST packets? That would be closer than my set of rules, but has the undesired effect of filtering what may be a RST packet from a valid program that has exited for some strange reason who was infact a listner. -- Rod Grimes - KD7CAX - (RWG25) rgrimes@gndrsh.dnsmgr.net To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message