bugtraq - Re: (ICMP attacks against TCP) (was Re: HPSBUX01137 SSRT5954

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <6.2.0.14.0.20050721233608.020307d0@pop.frh.utn.edu.ar>
Date: Thu, 21 Jul 2005 23:37:46 -0300
From: Fernando Gont <fernando@....utn.edu.ar>
To: Darren Reed <avalon@...igula.anu.edu.au>
Cc: full-disclosure@...ts.grok.org.uk, Security Alert <secure@...hs.cup.hp.com>,
	bugtraq@...urityfocus.com, Darren Reed <avalon@...igula.anu.edu.au>
Subject: Re: (ICMP attacks against TCP) (was Re:
	HPSBUX01137 SSRT5954


At 02:50 a.m. 21/07/2005, Darren Reed wrote:

> > >I think it is reasonable to say anyone trying to advertise an MTU less
> > >than 576 has nefarious purposes in mind.
> >
> > There are still some radio links with MTUs of 296 bytes.
>
>Go search with google....people still actively use smaller MTUs.
>
>What do you do?  Where do you draw the line in the sand?

Again and again: Read the draft at 
http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html

It fixes the problem without having to draw any line.

--
Fernando Gont
e-mail: fernando@...t.com.ar || fgont@....org





_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/