Messages in this thread |  | | | From | (Alan Cox) | | Subject | Re: teardrop and Linux as a router | | Date | Mon, 24 Nov 1997 09:34:38 +0000 (GMT) |
| |
> else if((ntohs(ip->tot_len)<8+(ip->ihl<<2))&&(ip->protocol==IPPROTO_TCP \ > || ip->protocol==IPPROTO_UDP)) > return FW_BLOCK; > [...] > > methinks that blocking those "ugly" packets without any notification > is a crime ;-) What about a simple patch ? (attached below)
Now allow me to send you millions of them filling your disk, driving your load through the roof and generally becoming a denial of service issue.
Also such tcp packets are possible in a purely theoretical view of the RFC's
|  |