[lkml]   [2000]   [Sep]   [8]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: linux kernel TCP, network connections and iptables

> Well, it looks like you're getting hit with stream.c or raped.c and what
> I'm passing on is just what I picked up from a CERT guy at Usenix. He
> claimed that stream.c worked by exploiting a long path through the kernel

He just said a crap. All the discussion around stream.c is banal
ether pollution.

> to bring the machine to its knees.

The same happens if you send any kind of packets. F.e. nice
method uncatchable by any firewall is to open good TCP connection
and to feed it with single byte packets. 8)

The only way to fight this is not to attach machine to fast network
or to slow down network artificially. 8)

To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to
Please read the FAQ at

 \ /
  Last update: 2005-03-22 12:38    [W:0.037 / U:1.424 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site