Re: Microsoft IKE DoS... source port 500?

["Nelson Brito" <nelson () tw-award com>]

[...]

: source port of 500?  Is this one of those 'unofficial standards' and
: hence the reason for Microsoft's implementation processing these packets
: as normal?

[...]

If you send a UDP scan from nmap you will see this port IS OPEN, so you can
realize that when UDP packet is send to any port, this port procced if it is
work.

PS: Attached is a proof-of-concept code that I sent to Security Focus.

Sem mais,
--
Nelson Brito

Attachment: nb-isakmp.c
Description: