d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Explain that TCP fragments with an offset of 1 are reported as being

Browse Source 
dropped by rule -1 if logging is enabled.

PR:		25796
Submitted by:	Crist J. Clark <cjclark@alum.mit.edu>
Approved by:	nik
This commit is contained in:
Dima Dorfman 2001-03-16 01:28:11 +00:00
parent 69451beb84
commit 32de505213
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=74319
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
sbin/ipfw/ipfw.8
View File

@ -1075,7 +1075,8 @@ There is one kind of packet that the firewall will always
discard, that is a TCP packet's fragment with a fragment offset of
one.
This is a valid packet, but it only has one use, to try
to circumvent firewalls.
to circumvent firewalls. When logging is enabled, these packets are
reported as being dropped by rule -1.
.It
If you are logged in over a network, loading the
.Xr kld 4