From owner-freebsd-security  Tue Jan 19 03:05:44 1999
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id DAA21395
          for freebsd-security-outgoing; Tue, 19 Jan 1999 03:05:44 -0800 (PST)
          (envelope-from owner-freebsd-security@FreeBSD.ORG)
Received: from cheops.anu.edu.au (cheops.anu.edu.au [150.203.149.24])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id DAA21389
          for <security@FreeBSD.ORG>; Tue, 19 Jan 1999 03:05:41 -0800 (PST)
          (envelope-from avalon@cheops.anu.edu.au)
Received: (from avalon@localhost)
	by cheops.anu.edu.au (8.9.1/8.9.1) id WAA19295;
	Tue, 19 Jan 1999 22:05:15 +1100 (EDT)
From: Darren Reed <avalon@coombs.anu.edu.au>
Message-Id: <199901191105.WAA19295@cheops.anu.edu.au>
Subject: Re: icmp
To: ck@adsu.bellsouth.com (Christian Kuhtz)
Date: Tue, 19 Jan 1999 22:05:14 +1100 (EDT)
Cc: security@FreeBSD.ORG
In-Reply-To: <19990118230751.D5878@oreo.adsu.bellsouth.com> from "Christian Kuhtz" at Jan 18, 99 11:07:51 pm
X-Mailer: ELM [version 2.4 PL23]
Content-Type: text
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org


Before you go, there is one mitigating circumstance with ICMP
unreachable messages.

On some IP implementations, they can be used to affect a denial
of service attack due to mishandling of the error message (it
causes open and established connections to be closed).

Darren

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message