lkml.org 
[lkml]   [2000]   [Sep]   [25]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: Better than SYNcookies?
Date
From
> So is he right, is his solution better than SYNcookies and there is
> something to be learned from his solution? Or does someone need to take
> him to school on the issue.

He isnt preserving the negotiated TCP MSS.

Other issues:

- If his ISN is the ip address then its a constant which is far worse than
random and also usable for replay attacks

[ie I dial up log the cookie, wait for you to get the same line - and I can
collect the dialup rack over time]

Alan





-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 12:38    [W:0.025 / U:6.416 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site