From owner-freebsd-net@FreeBSD.ORG Thu May 12 01:54:30 2005 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3BC6616A4D1 for ; Thu, 12 May 2005 01:54:30 +0000 (GMT) Received: from relay03.pair.com (relay03.pair.com [209.68.5.17]) by mx1.FreeBSD.org (Postfix) with SMTP id 8A85E43D1D for ; Thu, 12 May 2005 01:54:29 +0000 (GMT) (envelope-from silby@silby.com) Received: (qmail 43963 invoked from network); 12 May 2005 01:54:28 -0000 Received: from unknown (HELO localhost) (unknown) by unknown with SMTP; 12 May 2005 01:54:28 -0000 X-pair-Authenticated: 209.68.2.70 Date: Wed, 11 May 2005 20:54:13 -0500 (CDT) From: Mike Silbersack To: Suleiman Souhlal In-Reply-To: <52F4D230-9D2D-4D75-93DC-FF54BB902D98@FreeBSD.org> Message-ID: <20050511205216.Q3724@odysseus.silby.com> References: <52F4D230-9D2D-4D75-93DC-FF54BB902D98@FreeBSD.org> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed cc: freebsd-net@FreeBSD.org cc: Gandalf The White Subject: Re: FreeBSD and the Rose Attack / NewDawn X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 May 2005 01:54:30 -0000 On Sun, 8 May 2005, Suleiman Souhlal wrote: > The patch at http://people.freebsd.org/~ssouhlal/testing/ > ip_reass-20050507.diff does just this. > Could you kindly test it? > > Bye, > -- > Suleiman Souhlal | ssouhlal@vt.edu Your patch looks like it would defeat newdawn4, but it's not general enough to optimize for other possible attacks. I'll take a stab at implementing a more general solution tomorrow. Mike "Silby" Silbersack