[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ipfilter
Subject:    Re: Bug in IPF, filtering ipopts?
From:       Darren Reed <darrenr () reed ! wattle ! id ! au>
Date:       2001-08-27 23:22:32
[Download RAW message or body]

In some email I received from Avleen Vig, sie wrote:
> On Mon, 27 Aug 2001, Avleen Vig wrote:
> 
> > Sorry darren, one I think I should have explained:
> >
> > The syn-flood fills my leased line.
> > I only found out what the packets were when I used tcpdump DOWNSTREAM of
> > the IPF machine.
> 
> Second reply to my own message - this is not good!
> 
> Sorry for the confusion.. someone has just informed me that juno mangoes
> TCP option *not* IP options.
> 
> >From this I now have another question:
> Is it possible to block packets based on their TCP options, or if the
> have 'bad options'?

Currently no filtering on TCP options is possible.

[prev in list] [next in list] [prev in thread] [next in thread]