Date: Sun, 25 Feb 2001 14:54:13 +0200 From: Alexandr Kovalenko <neve_ripe@yahoo.com> To: Dag-Erling Smorgrav <des@ofug.org> Cc: Alex Hayward <xelah@xelah.com>, freebsd-stable@FreeBSD.ORG Subject: Re[4]: ipfw drop syn+fin Message-ID: <12068345205.20010225145413@yahoo.com> In-Reply-To: <xzp1ysnj5ha.fsf@flood.ping.uio.no> References: <Pine.LNX.4.10.10102231024230.15158-100000@sphinx.mythic-beasts.com> <xzpelwnj66j.fsf@flood.ping.uio.no> <15867369422.20010225143757@yahoo.com> <xzp66hzj5ki.fsf@flood.ping.uio.no> <xzp1ysnj5ha.fsf@flood.ping.uio.no>
next in thread | previous in thread | raw e-mail | index | archive | help
Hello Dag-Erling, Sunday, February 25, 2001, 2:45:53 PM, you wrote: DES> One thing I should add, though - there's no real reason to block DES> SYN+FIN segments unless you have a serious reason to believe that your DES> machine is a high-profile target for script and packet kiddies. The DES> TCP_DROP_SYNFIN option was developed for EFNet IRC servers. I'm running heavily loaded freemail/freeforum/freechat/free* webserver, could it be the reason for adding TCP_DROP_SYNFIN? Can I be target of these things? P.S. I think this is question for -questions, but I'm not subscribed to -questions. -- Best regards, Alexandr mailto:neve_ripe@yahoo.com _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?12068345205.20010225145413>