Re: FreeBSD Security Advisory FreeBSD-SA-14:08.tcp


On 4/30/2014 12:35 AM, FreeBSD Security Advisories wrote:
> IV.  Workaround
>
> It is possible to defend to these attacks by doing traffic normalization
> using a firewall.  This can be done by including the following /etc/pf.conf
> configuration:
>
> 	scrub in all

Hi,
	Is this the only pf option that will work, or is
scrub fragment reassemble
sufficient ?

	---Mike


-- 
-------------------
Mike Tancsa, tel +1 519 651 3400
Sentex Communications, mike@sentex.net
Providing Internet services since 1994 www.sentex.net
Cambridge, Ontario Canada   http://www.tancsa.com/
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"