Full Disclosure mailing list archives

Re: (ICMP attacks against TCP) (was Re: HPSBUX01137 SSRT5954


From: Fernando Gont <fernando () frh utn edu ar>
Date: Thu, 21 Jul 2005 23:37:46 -0300

At 02:50 a.m. 21/07/2005, Darren Reed wrote:

> >I think it is reasonable to say anyone trying to advertise an MTU less
> >than 576 has nefarious purposes in mind.
>
> There are still some radio links with MTUs of 296 bytes.

Go search with google....people still actively use smaller MTUs.

What do you do?  Where do you draw the line in the sand?

Again and again: Read the draft at http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html

It fixes the problem without having to draw any line.

--
Fernando Gont
e-mail: fernando () gont com ar || fgont () acm org





_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: