OpenBSD T/TCP support

2006-01-07 Thread Gustavo Rios
Dear folks,

i am trying to figure it out whether OpenBSD support T/TCP or not, but
until so far, i could not see.

Thanks in advance.



Re: OpenBSD T/TCP support

2006-01-07 Thread Theo de Raadt
 i am trying to figure it out whether OpenBSD support T/TCP or not, but
 until so far, i could not see.

T/TCP is fundamentally broken as discovered by Newsham and Ptaceck in
1998 or so.  So, no.



Re: OpenBSD T/TCP support

2006-01-07 Thread Theo de Raadt
  i am trying to figure it out whether OpenBSD support T/TCP or not, but
  until so far, i could not see.
 
 T/TCP is fundamentally broken as discovered by Newsham and Ptaceck in
 1998 or so.  So, no.

Ah, or maybe it was route who found it:

http://www.zone-h.org/files/32/t_tcp_vulnerability.txt

But I seem to remember something else found by the previous two as
well.

Anyways, why play fast and loose -- and thus make TCP worse -- when it
already has a number of difficult to resolve problems.

It is so easy to make things worse by adding extra gunk, yet we see
people doing it all the time.  Things should be kept simple, but they
are not.



Re: OpenBSD T/TCP support

2006-01-07 Thread Denis Doroshenko
OpenBSD AFAIK never had T/TCP implemented. FreeBSD had. but what the heck:

http://www.freebsd.org/releases/6.0R/relnotes-i386.html

...RFC 1644 T/TCP support has been removed. This is because the
design is based on a weak security model that can easily permit
denial-of-service attacks. This TCP extension has been considered a
defective one in a recent Internet Draft.

well, you can see how wise was OpenBSD's decision. i do love the
evolutionary approach! it looks like T/TCP was a pile of poo from the
very beginning...

On 1/7/06, Gustavo Rios [EMAIL PROTECTED] wrote:
 Dear folks,

 i am trying to figure it out whether OpenBSD support T/TCP or not, but
 until so far, i could not see.

 Thanks in advance.