3 ms·I wonder if this particular vulnerability can be stopped by a firewall.by NathanKP 17y agoI wonder if this particular vulnerability can be stopped by a firewall.hedgehog 17y agoPF can do it: scrub in all reassemble tcp http://www.openbsd.org/faq/pf/scrub.html http://www.openbsd.org/faq/pf/scrub.htmltptacek 17y agoIf it's IP timestamps, then certainly yes --- your firewall should be blocking this by default.