From owner-freebsd-security  Fri Oct 12  4:29:45 2001
Delivered-To: freebsd-security@freebsd.org
Received: from mail.euroscript-ls.de (mail.euroscript-ls.de [213.68.26.164])
	by hub.freebsd.org (Postfix) with ESMTP id 345DC37B401
	for <freebsd-security@freebsd.org>; Fri, 12 Oct 2001 04:29:41 -0700 (PDT)
Received: from euroscript-ls.de (testbox.euroscript-ls.de [10.18.10.4])
	by mail.euroscript-ls.de (8.10.0/8.10.0) with ESMTP id f9CBTdB85978
	for <freebsd-security@freebsd.org>; Fri, 12 Oct 2001 13:29:39 +0200 (CEST)
Message-ID: <3BC6D445.27C078CF@euroscript-ls.de>
Date: Fri, 12 Oct 2001 13:30:13 +0200
From: Radoy Pavlov <pavlov@euroscript-ls.de>
Organization: euroscript Language Services GmbH
X-Mailer: Mozilla 4.76 [en] (X11; U; FreeBSD 4.4-STABLE i386)
X-Accept-Language: en
MIME-Version: 1.0
To: freebsd-security@freebsd.org
Subject: Randomizing TCP sequence
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

Hello,

I'm trying to randomize my tcp sequence. Upon
experimenting with portsentry i made couple of
nmap scans and I was suprized to see that the
value never exceeds the number of 30, which IMO
is weak. I activated net.inet.tcp.strict_rfc1948=1,
which should do the randomizing, still i get a
value of 30 or so.

Are there any particular steps that could be taken
to make this happen ?

cheers, Radoy

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message