Messages in this thread | | | Date | Mon, 24 Nov 1997 13:40:23 -0500 (EST) | From | linux kernel account <> | Subject | Re: teardrop and Linux as a router |
| |
On Mon, 24 Nov 1997, Alan Cox wrote:
> > else if((ntohs(ip->tot_len)<8+(ip->ihl<<2))&&(ip->protocol==IPPROTO_TCP \ > > || ip->protocol==IPPROTO_UDP)) > > return FW_BLOCK; > > [...] > > > > methinks that blocking those "ugly" packets without any notification > > is a crime ;-) What about a simple patch ? (attached below) > > Now allow me to send you millions of them filling your disk, driving your > load through the roof and generally becoming a denial of service issue. > > Also such tcp packets are possible in a purely theoretical view of the RFC's >
Just line synfloods theses packets should be labled 'possible attack' and should be logged with flood protetction..
| |