Re: A fun smackdown...

[Ryan McBride <mcbride () countersiege com>]

On Sat, May 21, 2005 at 12:58:02PM -0400, Marcus J. Ranum wrote:
> The problem is that, since the standards don't take security into
> account, the traffic is not 'legitimate' - it's 'dangerous'   and a
> security device can and SHOULD interfere with it.
>
> Maybe the first time someone invents a PMTUD denial of
> service attack you'll "get it."

Too late.

http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html

The IETF is ignoring this, of course. Those with a clue (such as
OpenBSD) are not.
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards