Date: Mon, 16 Jul 2001 11:00:04 +0300 From: Ruslan Ermilov <ru@FreeBSD.ORG> To: Kris Kennaway <kris@obsecurity.org> Cc: Jonathan Lemon <jlemon@flugsvamp.com>, gjohnson@srrc.ars.usda.gov, net@FreeBSD.ORG, provos@OpenBSD.org Subject: Re: TCP ISN algorithm breaks TIME_WAIT (Re: select fails to return incoming connect on FreeBSD-4.3) Message-ID: <20010716110004.C97729@sunbay.com> In-Reply-To: <20010715131148.A10745@xor.obsecurity.org>; from kris@obsecurity.org on Sun, Jul 15, 2001 at 01:11:48PM -0700 References: <local.mail.freebsd-net/20010611131207.A39225@node7.cluster.srrc.usda.gov> <200106111937.f5BJb9o99898@prism.flugsvamp.com> <20010715131148.A10745@xor.obsecurity.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, Jul 15, 2001 at 01:11:48PM -0700, Kris Kennaway wrote: > On Mon, Jun 11, 2001 at 02:37:10PM -0500, Jonathan Lemon wrote: > > In article <local.mail.freebsd-net/20010611131207.A39225@node7.cluster.srrc.usda.gov> you write: > > >First off, I hope this is the right list. > > > > > >Could someone take a look at PR misc/27880? > > > > This was broken by the initial sequence number patch to TCP. > > > > When the server closes the socket, it puts the entry into the > > TIME_WAIT state. When a new SYN is received from the client while > > the socket is in this state, the new connection is only accepted > > if the new sequence number is > than the old one. > > > > Unfortunately, with a randomized seqence #, the new connection ISN > > may be less than the old sequence used, and the SYN will be ignored. > > > > I've copied this over to kris, who (IIRC) brought in the new sequence > > numbering. > > Sorry I've been ignoring this; I'm still getting caught up from my > vacation. Niels, how has OpenBSD handled this? > Recall my question on IRC about monotonicity right after you committed this? Cheers, -- Ruslan Ermilov Oracle Developer/DBA, ru@sunbay.com Sunbay Software AG, ru@FreeBSD.org FreeBSD committer, +380.652.512.251 Simferopol, Ukraine http://www.FreeBSD.org The Power To Serve http://www.oracle.com Enabling The Information Age To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010716110004.C97729>