nanog mailing list archives

Re: Alternate and/or hidden infrastructure addresses (BGP/TCP RST/SYN vulnerability)


From: Pekka Savola <pekkas () netcore fi>
Date: Fri, 23 Apr 2004 11:07:05 +0300 (EEST)


On Thu, 22 Apr 2004, Patrick W.Gilmore wrote:
Hrmmm, would the GTSM work with loopback peering?  ISTR it allowed a 
TTL of 254, which should make it to the loopback interface.

Only flawed implementations have to use TTL of 254 when you have a 
session between two adjacent loopbacks.  But I think those still 
exist...

(TTL should only be decremented when _forwarding_, and I don't think
you could argue that you need to _forward_ a packet from your ingress
interface to your _loopback_ interface..)

-- 
Pekka Savola                 "You each name yourselves king, yet the
Netcore Oy                    kingdom bleeds."
Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings


Current thread: