Re: ICMP dest-unreach in SYN_* states of TCP

[kuznet]

Hello!

>   - "reject" sends RSTs in response to SYN+no ACK TCP frames
>   - "reject" sends ICMP port unreachables to all other TCP frames

It will work and sounds reasonable.

It smells bad, though. Introducing such strong tricks only
to workaround minor bugs in some OSes... I do not know, where
we will finish then. 8)

The case with NT is the most spectacular. Seems, they have at least
two independant teams. One introduces bugs, another invents workarounds.
Silly bugs are followed by ugly workarounds. 8)

Luckily, loop between different OSes is much longer, so that
our kernel is filled with crap not so fastly. But tendency exists.

Alexey
-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]