Will I ever see a _legitimate_ packet in the wild that is a SYN, and has no MSS ?
If the answer is no, then is this a good rule to block those: ipfw add 00001 deny tcp from any to any tcpflags syn tcpoptions !mss Or is this one better: ipfw add 00002 deny tcp from any to any setup tcpoptions !mss ----- I am simply trying to place a rule which blocks those packets and does not deny _any_ legitimate traffic (I don't consider nmapping to be legit for this discussion) - this is all provided that I am correct that there are no _legitimate_ packets in the wild that have a SYN and no MSS. thanks. To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-hackers" in the body of the message
