Suggestion regarding a new option for IPFW2

Sten Daniel Sørsdal sten.daniel.sorsdal at wan.no
Sat Aug 2 11:47:04 PDT 2003


> 
> TCP resets MUST already come with the source address rewritten 
> otherwise it won't match up with the connection attempt on the
> original host.  If you look in ip_fw2.c:
> 
[snip]

Yes, but if you read my original message i was referring to icmp 
error messages as well, but thanks for clarifying/excluding the 
tcp resets.

- Sten


More information about the freebsd-ipfw mailing list