From owner-freebsd-security@FreeBSD.ORG Tue Mar 2 09:40:29 2004 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D637A16A4CE for ; Tue, 2 Mar 2004 09:40:29 -0800 (PST) Received: from relay.pair.com (relay.pair.com [209.68.1.20]) by mx1.FreeBSD.org (Postfix) with SMTP id 665EC43D31 for ; Tue, 2 Mar 2004 09:40:29 -0800 (PST) (envelope-from silby@silby.com) Received: (qmail 34123 invoked from network); 2 Mar 2004 17:40:28 -0000 Received: from niwun.pair.com (HELO localhost) (209.68.2.70) by relay.pair.com with SMTP; 2 Mar 2004 17:40:28 -0000 X-pair-Authenticated: 209.68.2.70 Date: Tue, 2 Mar 2004 11:40:27 -0600 (CST) From: Mike Silbersack To: Darren Reed In-Reply-To: <200403021730.i22HUN1J025897@caligula.anu.edu.au> Message-ID: <20040302113600.V12133@odysseus.silby.com> References: <200403021730.i22HUN1J025897@caligula.anu.edu.au> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII cc: freebsd-security@freebsd.org Subject: Re: mbuf vulnerability X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 02 Mar 2004 17:40:30 -0000 On Wed, 3 Mar 2004, Darren Reed wrote: > Uh, what did you test and what did you test with ? FreeBSD 4.9 with ipf. > "strict" requires that the sequence number in packet n should match > what that sequence number of the last byte in packet n-1 - i.e. no > out of order delivery is permitted. > > Darren strict isn't in the ipf manpage, and ipf complains when I try using it. I did some more google searching which implies that "strict" is available in ipfilter 4.x, not the 3.x series that ships with FreeBSD. Mike "Silby" Silbersack