Date: Thu, 15 Mar 2001 15:11:48 -0700 (MST) From: Nate Williams <nate@yogotech.com> To: Dag-Erling Smorgrav <des@ofug.org> Cc: nate@yogotech.com (Nate Williams), Adam Laurie <adam@algroup.co.uk>, Ronan Lucio <ronan@melim.com.br>, security@FreeBSD.ORG Subject: Re: Port 113 Message-ID: <15025.15908.270320.373266@nomad.yogotech.com> In-Reply-To: <xzpbsr2ptv7.fsf@flood.ping.uio.no> References: <006b01c0ad38$39eed0a0$1401a8c0@tedm.placo.com> <099801c0ad7c$75b63800$2aa8a8c0@melim.com.br> <15025.5630.472269.543769@nomad.yogotech.com> <3AB1261F.23B8BE75@algroup.co.uk> <15025.10176.676792.32675@nomad.yogotech.com> <xzpbsr2ptv7.fsf@flood.ping.uio.no>
next in thread | previous in thread | raw e-mail | index | archive | help
> > My local sendmail doesn't use *my* ident server, but remote sendmail > > servers use *my* ident server, so using ident locally speeds up mail > > transfers *to* my host. > > No, the problem only arises if you drop TCP 113 SYNs to the floor > instead of rejecting them (ipfw deny instead of ipfw reset); the > server times out waiting for you to reply. If you send an RST or an > ICMP UNREACH back, it'll give up immediately. Hmm, I remember a long time ago where it was said (urban legend) that even sending RST's confused older version of mail servers. Running the 'fake' ident server hasn't caused any problems AFAIK. :) :) Nate To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?15025.15908.270320.373266>