From owner-freebsd-bugs Fri Sep 11 10:13:59 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id KAA28606 for freebsd-bugs-outgoing; Fri, 11 Sep 1998 10:13:59 -0700 (PDT) (envelope-from owner-freebsd-bugs@FreeBSD.ORG) Received: from dt053nb4.san.rr.com (dt053nb4.san.rr.com [204.210.34.180]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id KAA28599 for ; Fri, 11 Sep 1998 10:13:57 -0700 (PDT) (envelope-from Studded@dal.net) Received: from dal.net (Studded@localhost [127.0.0.1]) by dt053nb4.san.rr.com (8.8.8/8.8.8) with ESMTP id KAA05034; Fri, 11 Sep 1998 10:13:33 -0700 (PDT) (envelope-from Studded@dal.net) Message-ID: <35F95A3D.F25AF804@dal.net> Date: Fri, 11 Sep 1998 10:13:33 -0700 From: Studded Organization: Triborough Bridge & Tunnel Authority X-Mailer: Mozilla 4.06 [en] (X11; I; FreeBSD 2.2.7-STABLE-0905 i386) MIME-Version: 1.0 To: Garrett Wollman CC: freebsd-bugs@FreeBSD.ORG Subject: Re: kern/7892: [PATCH] tcp_input does insufficient RST validation, also more general LAND attacks are possible References: <199809111510.IAA01535@freefall.freebsd.org> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-bugs@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Garrett Wollman wrote: > Great job, Don. I'll commit this today if nobody beats me to it. With absolutely no disrespect to don intended, there was considerable discussion on -security about whether his was the best solution. *I* personally couldn't tell you one way or the other, but I think that we should at least give the NetBSD solution a look before we commit to one fix or another. Also, it would be nice if we did come up with an "official" response, a security advisory and a patch since this bug was widely publicized on bugtraq almost two weeks ago now. Doug -- *** Chief Operations Officer, DALnet IRC network *** "Yes, the president should resign. He has lied to the American people, time and time again, and betrayed their trust. He is no longer an effective leader. Since he has admitted guilt, there is no reason to put the American people through an impeachment. He will serve absolutely no purpose in finishing out his term; the only possible solution is for the president to save some dignity and resign." - William Jefferson Clinton, 1974 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message