lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Date: Tue, 16 May 2006 18:33:05 -0400
From: "sanjay naik" <sanjaynaik@...mail.com>
To: dhenning@....com, pawel.worach@...il.com
Cc: bugtraq@...urityfocus.com
Subject: Re: Checkpoint SYN DoS Vulnerability


Hi David,

The firewalls are not configured to confuse the scanner. The configurations 
have been checked by the Checkpoint Tech Support and the Checkpoint SMEs 
from our team. This is not a mis-configuration issue and SYNdefender is 
disabled.

Regards,
Sanjay Naik, CISSP
Sr. Security Consultant


----Original Message Follows----
From: David Henning <dhenning@....com>
To: "Pawel Worach" <pawel.worach@...il.com>
CC: bugtraq@...urityfocus.com, sanjaynaik@...e.org
Subject: Re: Checkpoint SYN DoS Vulnerability
Date: Tue, 16 May 2006 17:00:03 -0400

Souds to me like the firewall is configured to confuse scanners on
purpose.  If the performance really does degrad to DoS levels then this is
more likely a mis-configuration of one of their add-ons, not an actual
bug.  Have the settings for their IPS and SYN-Defender been checked
carefully?

David Henning, CISSP
Principal Security Analyst
Hughes Network Systems
x5533

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today - it's FREE! 
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/



Powered by blists - more mailing lists