看板FB_security
標 題Re: FreeBSD Security Advisory FreeBSD-SA-14:08.tcp
發信站NCTU CS FreeBSD Server (Sat May 3 09:25:40 2014)
轉信站ptt!csnews.cs.nctu!news.cednctu!FreeBSD.cs.nctu!.POSTED!freebsd.org!ow
<<On Sat, 3 May 2014 13:53:44 +1000 (EST), Ian Smith <
[email protected]> said:
> I've always allowed frags, as per the example rulesets in rc.firewall.
> I only recall seeing them on DNS responses from zen.spamhaus.org, where
> I see plenty of these after a resetlog before the logging limit kicks
> in. I doubt I'd be getting rid of ~90% of incoming spam without; eg:
Blocking inbound fragments will definitely screw you when you try to
use DNSsec.
-GAWollman
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "
[email protected]"