Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 07 Aug 2008 14:46:50 -0400
From:      FreeBSD <freebsd@optiksecurite.com>
To:        kalin m <kalin@el.net>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Remote host replies to SYN+FIN
Message-ID:  <489B431A.7080209@optiksecurite.com>
In-Reply-To: <489B3FFD.308@el.net>
References:  <489A8EA3.5030102@el.net> <489B3FFD.308@el.net>

next in thread | previous in thread | raw e-mail | index | archive | help
kalin m a écrit :
> 
> does anybody have any idea how to resolve this?
> 
> thanks..
> 
> 
> kalin m wrote:
>> hi all...
>> after setting up a pf rule set on one of newly installed freebsd 7 i 
>> did a scan with nessus 3 on that machine
>>
>> the result i got was like this one:
>> http://www.nessus.org/plugins/index.php?view=single&id=11618 how do 
>> 'fix' it using pf?...
>>
>>
>>
>> thanks...
>>
>>
Hi,

I think that you should look at the 'scrub' directive in pf.conf. I 
think that a 'scrub in all' should block that kind of malformed packets.

Martin




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?489B431A.7080209>