From owner-freebsd-security Wed Jun 21 7:56:34 2000 Delivered-To: freebsd-security@freebsd.org Received: from lariat.org (lariat.org [12.23.109.2]) by hub.freebsd.org (Postfix) with ESMTP id AEC8437B780 for ; Wed, 21 Jun 2000 07:56:31 -0700 (PDT) (envelope-from brett@lariat.org) Received: from mustang.lariat.org (IDENT:ppp0.lariat.org@lariat.org [12.23.109.2]) by lariat.org (8.9.3/8.9.3) with ESMTP id IAA20975; Wed, 21 Jun 2000 08:56:19 -0600 (MDT) Message-Id: <4.3.2.7.2.20000621085414.045fdaa0@localhost> X-Sender: brett@localhost X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Wed, 21 Jun 2000 08:55:53 -0600 To: "Maksimov Maksim" , From: Brett Glass Subject: Re: How defend from stream2.c attack? In-Reply-To: <000401bfdb64$3eae8320$0c3214d4@dragonland.tts.tomsk.su> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Have you turned on the kernel flag that restricts emission of RST packets? I am not sure, but I think that Matt -- who is a stickler for RFC compliance -- may have set things up so that one must recompile the kernel before the flag will work. --Brett At 03:36 AM 6/21/2000, Maksimov Maksim wrote: >How defend from stream2.c attack (flooding ACK-packets) on my FreeBSD box? >I install FreeBSD 4.0-20000608-STABLE, but stream2.c attack freezed this >FreeBSD box as before! >Help! > >Best regards, >Maks Maksimov mailto:maksim@tts.tomsk.su > > > > > > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-security" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message