Bad loopback traffic not stopped by ipfw.

Ian Smith smithi at nimnet.asn.au
Tue Mar 2 04:33:40 PST 2004


On Tue, 2 Mar 2004, Tony Frank wrote:

 > Bit of a delayed response I'm afraid - PC troubles.

No worries, and thanks for that.  Curiousity sated, nothing to fix, no
way to track their real source on $oif anyway, so moving along ..

 > >  > > I> >deny tcp from any to any tcpflags rst,ack
 > >  > > I> >
 > >  > > I>    These packets never reach IPFW as we can see.

Only point of interest being that the old 2.2.6+ IPFW sees them fine, ie
they're being picked up by 'deny ip from 127.0.0.0/8 to any' here. 

Cheers, Ian

 > On Sun, Feb 29, 2004 at 01:28:23AM +1100, Ian Smith wrote:
 > > On Sat, 28 Feb 2004, Tony Frank wrote (in freebsd-net at freebsd.org):
 > > 
 > >  > On Wed, Feb 25, 2004 at 05:21:34PM +0300, Gleb Smirnoff wrote:
 > >  > > On Wed, Feb 25, 2004 at 04:19:51PM +0200, Iasen Kostov wrote:

[..]



More information about the freebsd-net mailing list