![]() | ||||||||||
Messages in this thread |
On Sat, Jun 11, 2005 at 09:51:44PM +0200, Willy Tarreau wrote: > > Please note that if I only called it "small DoS", it's clearly because > I don't consider this critical, but I think that most people involved > in security will find that DoSes based on port guessing should be > addressed when possible. Sorry but this patch is pointless. If I wanted to prevent you from connecting to www.kernel.org 80 and I knew your source port number I'd be directly sending you fake SYN-ACK packets which will kill your connection immediately. If you want reliability and security you really should be using IPsec. There is no other way. Cheers, -- Visit Openswan at http://www.openswan.org/ Email: Herbert Xu ~{PmV>HI~} <herbert@gondor.apana.org.au> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/ | |||||||||
| Last update: 2005-06-12 08:20 [from the cache] ©2003-2008 | ||||||||||