Date: 13 Jan 2002 05:16:52 +0100 From: Dag-Erling Smorgrav <des@ofug.org> To: Bill Fumerola <billf@mu.org> Cc: Lamont Granquist <lamont@scriptkiddie.org>, Garrett Wollman <wollman@khavrinen.lcs.mit.edu>, "Tim J. Robbins" <tim@robbins.dropbear.id.au>, freebsd-security@FreeBSD.ORG Subject: Re: options TCP_DROP_SYNFIN Message-ID: <xzpy9j2c2bv.fsf@flood.ping.uio.no> In-Reply-To: <20020112161749.I402@elvis.mu.org> References: <20011217203955.K4651-100000@coredump.scriptkiddie.org> <xzpy9j3d1p7.fsf@flood.ping.uio.no> <20020112161749.I402@elvis.mu.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Bill Fumerola <billf@mu.org> writes: > On Sat, Jan 12, 2002 at 04:32:52PM +0100, Dag-Erling Smorgrav wrote: > > You've never run an IRC server, have you? > is that the requirement for commenting? No, but his comments made it clear that he was not familiar with the attack patterns IRC servers were subject to. > ok, i don't see any reasons why > this is a kernel option when the exact same functionality is available > from both firewall facilities we currently ship. Overhead. That might not be an issue anymore, though. I don't know how fast ipfw is these days. DES -- Dag-Erling Smorgrav - des@ofug.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?xzpy9j2c2bv.fsf>