nanog mailing list archives
Re: TCP RST attack (the cause of all that MD5-o-rama)
From: "Stephen J. Wilcox" <steve () telecomplete co uk>
Date: Tue, 20 Apr 2004 20:24:02 +0100 (BST)
On Tue, 20 Apr 2004, James wrote:
i can see this 'attack' operational against a multihop bgp session that's not md5'd. now the question is... would this also affect single-hop bgp sessions? my understanding would be no, as single-hops require ttl set to 1.
you can engineer packets to make sure they have the right ttl when they arrive, ie if your 10 hops away, set ttl to 10 and it will be 1 on arrival :) Steve
-J On Tue, Apr 20, 2004 at 01:36:09PM -0400, Mike Tancsa wrote:http://www.uniras.gov.uk/vuls/2004/236929/index.htm -------------------------------------------------------------------- Mike Tancsa, tel +1 519 651 3400 Sentex Communications, mike () sentex net Providing Internet since 1994 www.sentex.net Cambridge, Ontario Canada www.sentex.net/mike
Current thread:
- TCP RST attack (the cause of all that MD5-o-rama) Mike Tancsa (Apr 20)
- Re: TCP RST attack (the cause of all that MD5-o-rama) James (Apr 20)
- Re: TCP RST attack (the cause of all that MD5-o-rama) Owen DeLong (Apr 20)
- Re: TCP RST attack (the cause of all that MD5-o-rama) Stephen J. Wilcox (Apr 20)
- Re: TCP RST attack (the cause of all that MD5-o-rama) James (Apr 20)
- Re: TCP RST attack (the cause of all that MD5-o-rama) Patrick W . Gilmore (Apr 20)
- Re: TCP RST attack (the cause of all that MD5-o-rama) Crist Clark (Apr 20)
- Re: TCP RST attack (the cause of all that MD5-o-rama) Dan Hollis (Apr 20)
- Re: TCP RST attack (the cause of all that MD5-o-rama) vijay gill (Apr 20)
- Re: TCP RST attack (the cause of all that MD5-o-rama) Rodney Joffe (Apr 20)
- Re: TCP RST attack (the cause of all that MD5-o-rama) vijay gill (Apr 20)
- Re: TCP RST attack (the cause of all that MD5-o-rama) vijay gill (Apr 20)
- Re: TCP RST attack (the cause of all that MD5-o-rama) Iljitsch van Beijnum (Apr 20)
- Re: TCP RST attack (the cause of all that MD5-o-rama) James (Apr 20)
- Re: TCP RST attack (the cause of all that MD5-o-rama) Crist Clark (Apr 20)