lkml.org 
[lkml]   [1996]   [Apr]   [9]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
Subjectfirewall, reject: icmp vs. tcp
Date

hi,

when I configure a rule to reject tcp/ip traffic to a particular port,
e.g. "ipfwadm -I -a reject -S <source> -D <dest> <port> -P tcp", then
on the host <source> requesting for that connection, ICMP packets
arrive telling something like "port unreachable".

unfortunately, some tcp/ip stacks, at least win/NT and w95, do not understand
these icmp packets and continue to try to open a connection until a timeout
occurres.

wouldn't it make sense to send tcp/ip packets with RST=1 in case a
rule that explictely specifies tcp/ip traffic was configured ?

regards, herbert rosmanith
herp@wildsau.idv.uni-linz.ac.at
rosmanith@edvz.uni-linz.ac.at


NB: kernel version 1.3.74



\
 
 \ /
  Last update: 2005-03-22 13:36    [W:0.102 / U:0.480 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site