[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <874q8t0yav.fsf@mid.deneb.enyo.de>
Date: Sat, 10 Sep 2005 16:53:12 +0200
From: Florian Weimer <fw@...eb.enyo.de>
To: Fernando Gont <fernando@....utn.edu.ar>
Cc: full-disclosure@...ts.grok.org.uk, bugtraq@...urityfocus.com
Subject: Re: Revised paper on "ICMP attacks against TCP"
* Fernando Gont:
> IIRC, those Cisco products that are not vulnerable to the PMTU just don't
> implement PMTUD, right?
You can explicitly enable PMTUD if you want ("ip tcp
path-mtu-discovery"). It's recommended to reduce CPU overhead for
processing BGP message (no kidding, apparently it id make a difference
in the past).
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Powered by blists - more mailing lists