Re: TCP RST attack

From: Mike Tancsa (mike_at_sentex.net)
Date: 04/21/04

  • Next message: Bruce M Simpson: "Re: TCP RST attack"
    Date: Tue, 20 Apr 2004 19:40:23 -0400
    To: "Crist J. Clark" <cjc@freebsd.org>, freebsd-security@freebsd.org
    
    

    At 04:24 PM 20/04/2004, Crist J. Clark wrote:
    >Arguments on the severity of the bug aside, FreeBSD does not
    >have a working RFC2385 implementation.

    Most of it is there

    http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/netipsec/ipsec.h
    has info about it. bms@freebsd.org is also working on completing the rest.
    I have been using his patches against quagga on a directly connected ebgp
    peer as well as an ebgp multi-hop peer as well for a good 2 months and it
    works as expected.

             ---Mike

    >And despite any particular
    >FreeBSD developer's opinion of the severity, there will be some
    >FreeBSD consumers who want RFC2385. Anyone working on it or
    >already have patches?
    >--
    >Crist J. Clark | cjclark@alum.mit.edu
    > | cjclark@jhu.edu
    >http://people.freebsd.org/~cjc/ | cjc@freebsd.org
    >_______________________________________________
    >freebsd-security@freebsd.org mailing list
    >http://lists.freebsd.org/mailman/listinfo/freebsd-security
    >To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"

    _______________________________________________
    freebsd-security@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-security
    To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"


  • Next message: Bruce M Simpson: "Re: TCP RST attack"

    Relevant Pages

    • Re: TCP RST attack
      ... "Crist J. Clark" writes: ... > Arguments on the severity of the bug aside, ... > FreeBSD developer's opinion of the severity, ...
      (FreeBSD-Security)
    • Re: TCP RST attack
      ... Arguments on the severity of the bug aside, ... FreeBSD developer's opinion of the severity, ...
      (FreeBSD-Security)