Hosting Provided By

Re: can pf send icmp protocol unreachables?

From: Toni Heinonen <Toni.Heinonen(at)teleware.fi>
Date: Tue Nov 26 2002 - 11:58:09 EST

> ipfstat!? Are you using PF or IPFilter?

PF, sorry, I meant to say pfctl.

> In PF if you just have a block without a return-... then the

Yeah, but I'd like my firewall to be a bit more intelligent and simulate a closed port. It seems you do have a return-something code here, as pf CAN send TCP resets and ICMP port unreachables.

> > yet it doesn't respond with a proto-unreachable like I'm telling it

No I haven't, but I tried googling for bug reports and I found nothing. I guess I'll try that next. Received on Tue Nov 26 11:53:21 2002

This message: [ Message body ]
Next message: Henning Brauer: "Re: can pf send icmp protocol unreachables?"
Maybe in reply to: Toni Heinonen: "can pf send icmp protocol unreachables?"
In reply to Dries Schellekens: "Re: can pf send icmp protocol unreachables?"
Next in thread: Henning Brauer: "Re: can pf send icmp protocol unreachables?"
Reply: Henning Brauer: "Re: can pf send icmp protocol unreachables?"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ] [ By messages with attachments ]

This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 13:48:27 EDT