RE: [Full-disclosure] Revised paper on ICMP attacks against TCP

2005-09-10 Thread Fernando Gont
At 04:08 p.m. 05/09/2005, alex wrote: Russian version (22.08.2005, with some analysis): http://www.securitylab.ru/contest/239695.php IIRC, those Cisco products that are not vulnerable to the PMTU just don't implement PMTUD, right? ___

Re: [Full-disclosure] Revised paper on ICMP attacks against TCP

2005-09-10 Thread Ɓukasz Bromirski
Florian Weimer wrote: IIRC, those Cisco products that are not vulnerable to the PMTU just don't implement PMTUD, right? You can explicitly enable PMTUD if you want (ip tcp path-mtu-discovery). It's recommended to reduce CPU overhead for processing BGP message (no kidding, apparently it id

[Full-disclosure] Revised paper on ICMP attacks against TCP

2005-09-05 Thread Fernando Gont
Folks, I have submitted to the IETF a revised version of my internet-draft on ICMP attacks against TCP. This version addresses the feedback I have received during the last eight months, and includes, among other things, pointers to existing implementations of the proposed fixes. It will

RE: [Full-disclosure] Revised paper on ICMP attacks against TCP

2005-09-05 Thread alex
@lists.grok.org.uk Subject: [Full-disclosure] Revised paper on ICMP attacks against TCP Folks, I have submitted to the IETF a revised version of my internet-draft on ICMP attacks against TCP. This version addresses the feedback I have received during the last eight months, and includes, among other