[lkml]   [2004]   [Sep]   [21]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: Linux 2.4.27 SECURITY BUG - TCP Local and REMOTE(verified) Denial of Service Attack
* David S. Miller:

> On Tue, 21 Sep 2004 20:32:12 +0200
> Florian Weimer <> wrote:
>> > But then you get PMTU problems...
>> PMTU discovery is not an issue because it's turned off anyway, at
>> least by default.
> It's on by default, for both TCP and UDP in the kernel,
> and has been so for a long time.

Linux is not the reference TCP/IP stack for routers. 8-)

> Why would it be off by default?

Probably because PMTUD is just a DRAFT STANDARD, and these router
folks are usually extremely conservative. Switching the default is
dangerous because it's likely to break existing setups, as Herbert

> If you disable PMTU discovery, say goodbye to TCP performance.

Indeed. On those platforms, the CPU impact is also significant, and
the overall increase in BGP convergence time is measurable.
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to
More majordomo info at
Please read the FAQ at

 \ /
  Last update: 2005-03-22 14:06    [from the cache]
©2003-2014 Jasper Spaans. hosted at Digital Ocean