From: Michael Peddemors <michael@linuxmagic.com>
To: Mike OConnor <kernel@pineview.net>,
Kernel Mailing List <linux-kernel@vger.kernel.org>
Cc: netfilter-devel@us5.samba.org
Subject: Re: No more DoS
Date: Thu, 21 Dec 2000 20:09:27 -0800 [thread overview]
Message-ID: <0012212009271E.24471@mistress> (raw)
In-Reply-To: <977453684.3a42c2744fbb7@ppro.pineview.net>
In-Reply-To: <977453684.3a42c2744fbb7@ppro.pineview.net>
Not only is this a well written article, and clearer than most other
documents (Even Mine :>) but he is dead on track with his basic concepts..
Exactly what I have been looking into over at our company. (Well, close
enough)
The concept of trusting a SYN packet, has to go.. we have to assume that it
is false/bad, and only after receiving the ACK in reply to our SYN/ACK can we
start assuming that the previous packets were good..
All IMHO.... Nice find and a good read for anyone..
I am CC'ing the netfilter list as they might like the read.. in case they
haven't read it. (Surprised I haven't seen more discussion on this topic)
On Thu, 21 Dec 2000, Mike OConnor wrote:
> Hi
>
> I would like to point who ever is in charge of the TCP stack for the linux
> kernel at a site which claims to have a method of eliminate denial of
> service (DoS) attacks
>
> http://grc.com/r&d/nomoredos.htm
>
> With my limited unstanding of TCP and DoS attacks this would seem to be the
> answer, instead of a work around.
>
--
--------------------------------------------------------
Michael Peddemors - Senior Consultant
Unix Administration - WebSite Hosting
Network Services - Programming
Wizard Internet Services http://www.wizard.ca
Linux Support Specialist - http://www.linuxmagic.com
--------------------------------------------------------
(604) 589-0037 Beautiful British Columbia, Canada
--------------------------------------------------------
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/
next prev parent reply other threads:[~2000-12-22 3:30 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2000-12-22 2:24 No more DoS Mike OConnor
2000-12-22 2:00 ` David S. Miller
2000-12-22 4:20 ` Michael Peddemors
2000-12-22 4:53 ` David S. Miller
2000-12-22 2:36 ` Tom Vier
2000-12-22 4:09 ` Michael Peddemors [this message]
2000-12-22 4:55 ` Michael H. Warfield
2000-12-22 18:21 ` kuznet
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=0012212009271E.24471@mistress \
--to=michael@linuxmagic.com \
--cc=kernel@pineview.net \
--cc=linux-kernel@vger.kernel.org \
--cc=netfilter-devel@us5.samba.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.