RE: COmpare Firewalls

["Ryan Russell" <Ryan.Russell () sybase com>]

> I know that MS has addressed problems like "ping of death" to NT with
> previous service packs;  See
> http://support.microsoft.com/support/kb/articles/Q132/4/70.asp for a really
> old one.  Does anyone out there know whether NT 4 SP5 (without MS Proxy's
> packet filter) is still vulnerable to such attacks?  Just curious.

http://www.microsoft.com/security/bulletins/ms99-034.asp
Patch Available for "Fragmented IGMP Packet" Vulnerability

Windows still has stack-level issues.  This bulletin is less than a week old.

As for Daemon's comment about apps not being able to protect against
ICMP stuff..

Take a look at Route's BSD mod to make ICMP a userland app.

I suppose that's cheating, though, since he ripped it out of the kernel. :)

                         Ryan