From owner-freebsd-current  Tue May 21 08:49:54 1996
Return-Path: owner-current
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.3/8.7.3) id IAA03986
          for current-outgoing; Tue, 21 May 1996 08:49:54 -0700 (PDT)
Received: from nol.net (root@dazed.nol.net [206.126.32.101])
          by freefall.freebsd.org (8.7.3/8.7.3) with ESMTP id IAA03976
          for <current@FreeBSD.ORG>; Tue, 21 May 1996 08:49:45 -0700 (PDT)
Received: from dazed.nol.net (blh@dazed.nol.net [206.126.32.101]) by nol.net (8.7.5/8.7.3) with SMTP id KAA27326; Tue, 21 May 1996 10:49:37 -0500 (CDT)
X-AUTH: NOLNET SENDMAIL AUTH
Date: Tue, 21 May 1996 10:49:36 -0500 (CDT)
From: "Brett L. Hawn" <blh@nol.net>
To: Garrett Wollman <wollman@lcs.mit.edu>
cc: current@FreeBSD.ORG
Subject: Re: freebsd + synfloods + ip spoofing
In-Reply-To: <9605211544.AA32102@halloran-eldar.lcs.mit.edu>
Message-ID: <Pine.SOL.3.93.960521104738.27243A-100000@dazed.nol.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-current@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

On Tue, 21 May 1996, Garrett Wollman wrote:

> <<On Tue, 21 May 1996 10:39:08 -0500 (CDT), "Brett L. Hawn" <blh@nol.net> said:
> 
> > You'll have to pardon me if I don't see it, as part of the discussion we
> > played with my spoofing utility and I found 2.2 -current just as easy to
> > spoof as 2.0.5.
> 
> Presumably your burglars' tools already have knowledge of the 4.4 RNG.
> 

Actually no, I haven't updated the program in some months, its remained
pretty much static since 2.1 was released. Basically fbsd'd sequencing is
too easy to match.

Brett