Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 7 Jul 2001 20:52:12 +0200 (MEST)
From:      Michael Nottebrock <MichaelNottebrock@gmx.net>
To:        freebsd-security@freebsd.org
Subject:   IPSEC & TCP sequence number generation
Message-ID:  <1199.994531932@www25.gmx.net>

next in thread | raw e-mail | index | archive | help

[-- Attachment #1 --]
I recently recompiled my FreeBSD 4.3-STABLE kernel with

options IPSEC
options IPSEC_ESP
options IPSEC_DEBUG

in order to experiment with a IPSEC-VPN.

When I scanned myself from a few remote machines today, I noticed that 
nmap -O reports a tcp sequence prediction class "trivial time dependency", 
difficulty=0 (trivial joke), before enabling IPSEC it used to be all 9's. 
Has anyone else experienced this? Have I overlooked something or is this 
normal behaviour?


Greetings,

Michael Nottebrock

-- 
GMX - Die Kommunikationsplattform im Internet.
http://www.gmx.net

GMX Tipp:

Machen Sie Ihr Hobby zu Geld bei unserem Partner 1&1!
http://profiseller.de/info/index.php3?ac=OM.PS.PS003K00596T0409a
[-- Attachment #2 --]

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1199.994531932>