Bad loopback traffic not stopped by ipfw.

[Gleb Smirnoff]

On Wed, Feb 25, 2004 at 04:19:51PM +0200, Iasen Kostov wrote:
I> >>16:26:23.287642 0:1:2:9>c:cf:e2 0:02:55:b0:90:e4 0800 60: 127.0.0.1.80 > 
I> >>192.168.118.205.1046: R 0:0(0) ack 1959723009 win 0
I> >
I> >This is some kind of Win32 virus. This floods can be easily
I> >stopped by ipfw rule:
I> >
I> >deny tcp from any to any tcpflags rst,ack
I> >
I> > 
I> >
I>    These packets never reach IPFW as we can see.

Ughu. Really.
But I have millions of them from non-localhost addresses.

P.S. This is really off-topic already. We should move to -isp@ may be.

-- 
Totus tuus, Glebius.
GLEBIUS-RIPN GLEB-RIPE