RE: Dropping connections without RST

[Geoff Rehmet]

> 
> This is an ACK.  I like those names, the idea is okay given that
> the documentation for it reflects what has been discussed here in
> this thread so folks can understand this is a very simple security
> measure.
Hmm, dumb question for the day - where are things like "log_in_vain"
documented. - And don't anyone say "in /etc/defaults/rc.conf"!
If there is a manpage, I sure as hell haven't found it!

Looks like I'm volunteering to write a manpage for the net.inet
sysctls - or does one exist? - I sure as hell can't find it!

> 
> And it works just like a blackhole route does... if no more specfic
> route exists we send the packet to a bit bucket, now someone want
> to make the routing code under ``port routes'' :-) :-)...
That sounds rather like a plug gateway. :-) :-)
A kernel level plug gateway would be quite a funky thing though. :-)


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message