Messages in this thread | | | Date | Sun, 12 Sep 2004 21:23:31 +0200 | From | Toon van der Pas <> | Subject | Re: Linux 2.4.27 SECURITY BUG - TCP Local and REMOTE(verified) Denial of Service Attack |
| |
On Sun, Sep 12, 2004 at 06:04:53PM +0100, Alan Cox wrote: > > This is not a TCP flaw, its a combination of poor design by certain > vendors, poor BGP implementation and a lack of understanding of what TCP > does and does not do. See IPSec. TCP gets stuff from A to B in order and > knowing to a resonable degree what arrived. TCP does not proide a > security service. > > (The core of this problem arises because certain people treat TCP > connection down on the peering session as link down)
Alan, could you please elaborate on this last statement? I don't understand what you mean, and am very interested.
Thanks, Toon. -- "Debugging is twice as hard as writing the code in the first place. Therefore, if you write the code as cleverly as possible, you are, by definition, not smart enough to debug it." - Brian W. Kernighan - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |