question for TCP gurus (in ipfw)

Alexander Motin mav at alkar.net
Thu Dec 14 05:49:35 PST 2006


Julian Elischer wrote:
> could we do either of:
> 1/ not set the ACK bit  and just not do the extra work. Just send a reset?

Reset packet MUST have valid sequence number. Else it will be rejected 
as protection from DoS atack.


More information about the freebsd-net mailing list