Hmmm. I haven't started at the stack to see if this is feasible,
but can't the code that implements IPFW's "established" keyword
be used to discard the ACK if it isn't associated with an
active session?

--Brett

At 05:34 PM 1/20/2000 , Warner Losh wrote:
   
>It is a remote exploit.
>
>Warner



To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-stable" in the body of the message

Reply via email to