Re: How to not receive a TCP packet...

Gretta Bartels (gretta@hirame.cs.washington.edu)
17 Aug 1998 11:39:36 -0700

> Would it be possible to use firewall features (in FreeBSD or Linux) to
> drop TCP packets coming from the IP address of the machine with which
> you're having the dialogue? If not a traditional firewall, then maybe
> Dummynet? (http://www.iet.unipi.it/~luigi/ip_dummynet/)

I don't know anything about linux, but it looks like dummynet for
FreeBSD just uses ipfw, the regular firewall utility, so it seems
unlikely to me that dummynet will be able to accomplish anything that
ipfw can't.

So I guess the question is whether ipfw deletes the banned packets
before or after Stefan's user-level tcp sender/receiver copies them
out of the stack. I'm not sufficiently network stack-savvy to figure
that out right now.

Gretta