On Tue, 2002-12-17 at 13:02, Clifton Royston wrote: > ipf does have the ability to more correctly simulate a closed port. > I did a similar exercise on my personal OpenBSD firewall box earlier > this year; I won't go through your whole ruleset, but basically for > every TCP port you block, you need to add a return-rst, and for every > UDP port you block, you need to add return-icmp(port-unr). This > provides a pretty good simulation of a host running no services, if > that's what you want to look like.
Does ipfw or ipf have the ability to return a SYN/ACK packet for each incoming SYN, and return an appropriate ACK any incoming ACK packets? (mischievous grin) Craig To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-stable" in the body of the message
