nanog mailing list archives

Re: What Worked - What Didn't


From: Martin Cooper <mjc () cooper org uk>
Date: Mon, 17 Sep 2001 23:31:26 +0100


Alex Bligh <alex () alex org uk> writes:

--On Monday, 17 September, 2001 2:32 PM -0400 "Patrick W. Gilmore"
<patrick () ianai net> wrote:

Maybe I missed something?

Only all the well documented attacks (including DoS).
Think about sending RST to BGP port (and other random
ports) on your routers.

I thought TCP stacks were supposed to do sequence number checking on
RST's to make sure they fell within the bounds of the unacknowledged
portion of the current window? Or is Cisco's implementation broken?

M.


Current thread: