Date: Fri, 13 Feb 1998 15:17:49 -0800 (PST) From: dima@best.net (Dima Ruban) To: jkowall@coffeehaus.net (Jonah Kowall) Cc: freebsd-security@FreeBSD.ORG Subject: Re: LAND revisitied Message-ID: <199802132317.PAA04829@burka.rdy.com> In-Reply-To: <199802132306.SAA26697@java.coffeehaus.net> from Jonah Kowall at "Feb 13, 98 06:00:40 pm"
next in thread | previous in thread | raw e-mail | index | archive | help
Jonah Kowall writes:
> I cvsuped my sources and recompiled, and LAND still crashes the machine, is
> there any file I can look in the make sure the patch was indeed installed in
> the tree?
/sys/netinet/tcp_input.c should have the following code:
/*
* Reject attempted self-connects. XXX This actually masks
* a bug elsewhere, since self-connect should work.
* However, a urrently-active DoS attack in the Internet
* sends a phony self-connect request which causes an infinite
* loop.
*/
if (ti->ti_src.s_addr == ti->ti_dst.s_addr
&& ti->ti_sport == ti->ti_dport) {
tcpstat.tcps_badsyn++;
goto drop;
}
>
> - Jonah Kowall
>
> VP Technology
> Coffeehaus Networks / Content Advisor
> Somerville, MA
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe security" in the body of the message
>
-- dima
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199802132317.PAA04829>