Re: Revised paper on "ICMP attacks against TCP"

[Florian Weimer <fw () deneb enyo de>]

* Fernando Gont:

> IIRC, those Cisco products that are not vulnerable to the PMTU just don't 
> implement PMTUD, right?

You can explicitly enable PMTUD if you want ("ip tcp
path-mtu-discovery").  It's recommended to reduce CPU overhead for
processing BGP message (no kidding, apparently it id make a difference
in the past).
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/