killsentry.c shows that automatic firewalling is a bad idea by sending spoofed FIN packets from different hosts in an attempt to confuse Portsentry. Tested on FreeBSD 3.2.
53c616376a8cf4e338ec21587c689c67facb4791006565268125022e9ce67769
reset_state.c exploits a recent bug in pix firewalls which drops an entry in the state table when a rst packet is received.
fbd4f85d44914f1cf74917bc5237cc57b2f2878219c337a7f80ec6aed8e49709