Re: ipfw drop packets based on SYN TTL

2000-08-14 Thread Bruce Petro
Is this similar to the following kernel configuration? options TCP_DROP_SYNFIN #drop TCP packets with SYN+FIN Thanks! Bruce. __ FREE Personalized Email at Mail.com Sign up at http://www.mail.com/?sr=signup To Unsubscribe: send mail to

Re: ipfw drop packets based on SYN TTL

2000-08-14 Thread Bill Fumerola
On Mon, Aug 14, 2000 at 06:44:28PM -0400, Bruce Petro wrote: Is this similar to the following kernel configuration? options TCP_DROP_SYNFIN #drop TCP packets with SYN+FIN Not at all. The original poster is looking to drop all packets with a certain tcp syn#, where the TCP_DROP_SYNFIN

Re: ipfw drop packets based on SYN TTL

2000-08-14 Thread FengYue
No, TTL is in IP header while SYN FIN are TCP flags. On Mon, 14 Aug 2000, Bruce Petro wrote: Is this similar to the following kernel configuration? options TCP_DROP_SYNFIN #drop TCP packets with SYN+FIN Thanks! Bruce. To Unsubscribe: send mail to [EMAIL PROTECTED] with

Re: ipfw drop packets based on SYN TTL

2000-08-13 Thread Darren Reed
Hi, I need to drop packets using ipfw based on the value of TTL and the value of TTL on a 2.2.8-stable system. It seems ipfw does not support this, what options do I have? If you use IP Filter, this should "just work". You won't have to upgrade your system to FreeBSD 4.x/5.x either. I

ipfw drop packets based on SYN TTL

2000-08-12 Thread FengYue
Hi, I need to drop packets using ipfw based on the value of TTL and the value of TTL on a 2.2.8-stable system. It seems ipfw does not support this, what options do I have? thanks To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-hackers" in the body of the message

Re: ipfw drop packets based on SYN TTL

2000-08-12 Thread FengYue
On Sat, 12 Aug 2000, FengYue wrote: Hi, I need to drop packets using ipfw based on the value of TTL and the value of TTL on a 2.2.8-stable system. It seems ^^^ I meant SYN To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-hackers" in the

Re: ipfw drop packets based on SYN TTL

2000-08-12 Thread Bill Fumerola
On Sat, Aug 12, 2000 at 12:06:24PM -0700, FengYue wrote: Hi, I need to drop packets using ipfw based on the value of TTL and the value of TTL on a 2.2.8-stable system. It seems ^^^ I meant SYN Okay, then I already wrote this and just haven't committed it. I will

Re: ipfw drop packets based on SYN TTL

2000-08-12 Thread Dennis
At 05:34 PM 8/12/00 -0400, Bill Fumerola wrote: On Sat, Aug 12, 2000 at 12:03:15PM -0700, FengYue wrote: Hi, I need to drop packets using ipfw based on the value of TTL and the value of TTL on a 2.2.8-stable system. It seems ipfw does not support this, what options do I have? Why dont you

Re: ipfw drop packets based on SYN TTL

2000-08-12 Thread FengYue
On Sat, 12 Aug 2000, Dennis wrote: At 05:34 PM 8/12/00 -0400, Bill Fumerola wrote: On Sat, Aug 12, 2000 at 12:03:15PM -0700, FengYue wrote: Hi, I need to drop packets using ipfw based on the value of TTL and the value of TTL on a 2.2.8-stable system. It seems ipfw does not support