Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 16 Jan 2001 22:56:47 +1100 (EST)
From:      Darren Reed <avalon@coombs.anu.edu.au>
To:        dennisjun@home.com (Dennis Jun)
Cc:        freebsd-questions@FreeBSD.ORG, freebsd-security@FreeBSD.ORG
Subject:   Re: TCP_DROP_SYNFIN
Message-ID:  <200101161156.WAA15035@caligula.anu.edu.au>
In-Reply-To: <004a01c07f90$29bcef80$0300a8c0@wilma> from Dennis Jun at "Jan 16, 1 02:44:31 am"

next in thread | previous in thread | raw e-mail | index | archive | help
In some mail from Dennis Jun, sie said:
> I have compiled this option in my kernel on 3 differents FreeBSD boxes
> (4.1.1-STABLE, 4.1-RELEASEs) and I have noticed that it doesn't work all
> the time. Specifically with this scan  nmap -v -O -sS .  Is it just me or
> does this not work for other people as well?

This is a bullshit change/patch (sorry for being blunt).  I think your aim
for this (defeat nmap scanning) is a load of horse manure.

Use ipfw/ipfilter to do this.

Darren


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200101161156.WAA15035>