RE: Dropping connections without RST

[Geoff Rehmet]

> In message <[EMAIL PROTECTED]> Archie 
> Cobbs writes:
> : Not that easily.. how are you going to make ipfw dynamically know
> : which ports have listeners and which don't?
> 
> By filtering all RST packets?

My view was that this is much simpler than filtering packets -
never generate the packet.  My guess is that it creates lower
overheads.  In some instances, I don't want to look at every
packet (which in effect happens with a packet filter).

Geoff.


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message