Re: New tcp stack attack

view
thread

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

[view in full thread]

From: Fernando Gont <fernando@...>

To: Dries Schellekens <schellekens.dries@...>, Duncan Patton a Campbell <campbell@...>

Cc: Claudio Jeker <cjeker@...>, <misc@...>

Subject: Re: New tcp stack attack

Date: Wednesday, October 1, 2008 - 11:29 am

At 11:47 a.m. 01/10/2008, Dries Schellekens wrote:

> > It seems to me the "problem" is with SYN cookies.

quoted text

>
>When I read the pseudo article, I had the impression that the server
>does not have to implement SYN cookies. Their sockstress program uses
>(client) SYN cookies to estabilish a lot of TCP connections with
>minimal own resources...

Yes. This is in an unnecessarily-expensive naphta attack.

Kind regards,

--
Fernando Gont
e-mail: fernando@gont.com.ar || fgont@acm.org
PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

Messages in current thread:

Re: New tcp stack attack, Fernando Gont, (Wed Oct 1, 11:29 am)

Navigation

Popular discussions


linux-kernel:
Alan	Re: [RFC] Heads up on sys_fallocate()
Tarkan Erimer	Re: Dual-Licensing Linux Kernel with GPL V2 and GPL V3
Greg Kroah-Hartman	[PATCH 001/196] Chinese: Add the known_regression URI to the HOWTO
Paul Mundt	Re: 2.6.22-rc4-mm2
git:

openbsd-misc:

linux-netdev:
Gerrit Renker	[PATCH 15/37] dccp: Set per-connection CCIDs via socket options
Jarek Poplawski	[PATCH] pkt_sched: Destroy gen estimators under rtnl_lock().
David Miller	Re: [GIT]: Networking
Frans Pop	svc: failed to register lockdv1 RPC service (errno 97).

Colocation donated by:

Online users

Syndicate