Re: PIX DMZ Denial of Service - TCP Resets

2000-03-27 Thread Guido van Rooij
On Wed, Mar 22, 2000 at 02:25:16AM +1100, Darren Reed wrote: > > The general gist of this problem is poorly implemented TCP connection > state tracking. You *must* track window sizes and sequence numbers > and acknowledgments to at least reduce the chance of any given TCP > packet from "outside"

Re: Subtle data corruption of TCP streams

2000-03-24 Thread Guido van Rooij
This sounds like the mechanism used by Packeteer's PacketShaper. For some white papers see: http://www.packeteer.com/technology/technology.htm -Guido