On Wed, 11 May 2011, Dobbins, Roland wrote: > So the outbound stateful checking of server response traffic is moot, > and simply constitutes a stateful DDoS chokepoint which makes it trivial > for an attacker to take down the server in question by filling up the > state-tables of said firewall with well-formed, > programatically-generated traffic.
<irony> Yup. We all know servers handle traffic without any of those pesky state-tables that can be filled up with well-formed, programatically-generated traffic. </irony> -- Pavel Kankovsky aka Peak / Jeremiah 9:21 \ "For death is come up into our MS Windows(tm)..." \ 21st century edition / _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
