Date: Mon, 4 Sep 2000 14:45:41 +1100 (Australia/NSW) From: Darren Reed <avalon@coombs.anu.edu.au> To: nate@yogotech.com Cc: billf@chimesnet.com (Bill Fumerola), avalon@coombs.anu.edu.au (Darren Reed), rwatson@FreeBSD.ORG (Robert Watson), dr@kyx.net (Dragos Ruiu), cjclark@alum.mit.edu, cjclark@reflexnet.net (Crist J . Clark), list@rachinsky.de (Nicolas), freebsd-security@FreeBSD.ORG Subject: Re: ipfw and fragments Message-ID: <200009040345.OAA24476@cairo.anu.edu.au> In-Reply-To: <200009040233.UAA12035@nomad.yogotech.com> from "Nate Williams" at Sep 03, 2000 08:33:53 PM
next in thread | previous in thread | raw e-mail | index | archive | help
In some mail from Nate Williams, sie said: > > > > It never reassembles and doesn't hold them in a buffer until they're > > > all received either. > > > > Which I still think is the proper behavior for both ipfw and ipfilter. > > I can think of some trivially easy DoS attacks if this is done... Ummm, what exactly would you be inflicting a DoS attack on ? Darren To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200009040345.OAA24476>