Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 13 Aug 1998 04:17:42 -0600
From:      Brett Glass <brett@lariat.org>
To:        Philippe Regnauld <regnauld@deepo.prosa.dk>
Cc:        Marius Bendiksen <Marius.Bendiksen@scancall.no>, freebsd-security@FreeBSD.ORG
Subject:   Re: UDP port 31337
Message-ID:  <199808131017.EAA09424@lariat.lariat.org>
In-Reply-To: <19980813121846.33945@deepo.prosa.dk>
References:  <199808121812.MAA01183@lariat.lariat.org> <199808121735.LAA00738@lariat.lariat.org> <3.0.5.32.19980812192128.0097a2a0@mail.scancall.no> <199808121700.LAA00346@lariat.lariat.org> <Pine.BSF.3.96.980812225354.21008E-100000@aniwa.sky> <3.0.5.32.19980812112915.0092ead0@mail.scancall.no> <3.0.5.32.19980812193700.0092f220@mail.scancall.no> <199808121812.MAA01183@lariat.lariat.org>

next in thread | previous in thread | raw e-mail | index | archive | help
At 12:18 PM 8/13/98 +0200, Philippe Regnauld wrote:
 
>Brett Glass writes:
>> If no one was listening, it wouldn't be a problem.
>> 
>> Only an attacker who INTENDED to invade your systems would be subject to
>> crashes due to the response. And would deserve it.
>
>	... provided he hadn't spoofed his source address...
>
>	i.e.: you might be retaliating against some poor guy who didn't ask 
>	for it. (I could for example spoof a source address of 206.100.185.2).

You're clearly not listening.

Again, the counterattack would do nothing unless it arrived at the system
which was actually being used to conduct the attack.

--Brett Glass

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe security" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199808131017.EAA09424>