Bugtraq mailing list archives

Re: FreeBSD's RST validation


From: db () DB NET (Diane Bruce)
Date: Sun, 30 Aug 1998 19:09:46 -0700


Tristan Horn says:

--ZRyEpB+iJ+qUx0kp
Content-Type: multipart/mixed; boundary=qGV0fN9tzfkG3CxV

  I hate people who mime their email for the plain text part.
In any case.


--qGV0fN9tzfkG3CxV
Content-Type: text/plain; charset=us-ascii

RFC 793, pages 36-39 (chapter 3.5) describes closing connections with
TCP.  Page 37 is of particular interest:
...

IRC in particular will probably be affected, due to the ease of getting
addresses and such.  /stats L even used to give you the port numbers
for users, servers and listening sockets, but I believe this was fixed
in /hybrid a while back, and then +CS.  /stats c should just be disabled
for non-opers since it lets people find the port # for autoconnects.

  I have been planning it. Well, allowing stats c, but not giving
the actual IP's, I'll disable the port # as well.
Port 6666 is quite commonly used for autoconnect, as well as 31337...
Not really very much that can be done from userland really...

...

TS4 rocks!

  I do not like TS4. But, this is hardly the place to discuss it.

--
Diane Bruce, http://www.db.net/~db  http://www.db.net email db () db net



Current thread: