From: "David S. Miller" <davem@redhat.com>
To: Gandalf The White <gandalf@digital.net>
Cc: netdev@oss.sgi.com
Subject: Re: Fragmentation Attack
Date: Sun, 8 Feb 2004 12:45:28 -0800 [thread overview]
Message-ID: <20040208124528.2c667378.davem@redhat.com> (raw)
In-Reply-To: <BC4A83EB.E263%gandalf@digital.net>
On Sat, 07 Feb 2004 12:00:42 -0600
Gandalf The White <gandalf@digital.net> wrote:
> The requirements of the attack (from the perspective of the paper I wrote)
> was that you had taken over 20 cable modem computers. From this viewpoint
> this could (of course) produce the required number of packets IMHO.
>
> Of course you could also clog up the bandwidth of just about any destination
> network with this requirement, but that is a different DoS.
Yes, but this very fact makes the "DoS" much much less interesting.
If I can clog your link anyways with arbitrary traffic, who cares
what it does as a second order effect, the machine is made unreachable
and unusable either way.
Also, these half-complete ICMP packets are really super easy to create
firewall rules for to block them at ingress of a major site.
next prev parent reply other threads:[~2004-02-08 20:45 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-02-07 17:36 Fragmentation Attack Gandalf The White
2004-02-07 17:45 ` David S. Miller
2004-02-07 18:00 ` Gandalf The White
2004-02-08 20:45 ` David S. Miller [this message]
2004-02-08 21:12 ` Gandalf The White
2004-02-08 21:18 ` David S. Miller
2004-02-12 2:20 ` Gandalf The White
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20040208124528.2c667378.davem@redhat.com \
--to=davem@redhat.com \
--cc=gandalf@digital.net \
--cc=netdev@oss.sgi.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.