On Sun, Jun 12, 2005 at 02:22:47PM +0200, Thomas Graf wrote: > > > Look at the first check inside th->ack in tcp_rcv_synsent_state_process. > > Usually a continious flow of ACK+RST is used to prevent a connection > from being established, it's more reliable because even if you hit the > ISS+rcv_next window the connection attempt will still be reset. Sure. My point is that there are a hundred and one ways to attack a TCP connection in a manner similar to the original method that started this thread. So fixes like this are pretty pointless. Cheers, -- Visit Openswan at http://www.openswan.org/ Email: Herbert Xu ~{PmV>HI~} <[email protected]> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
- References:
- Re: [PATCH] fix small DoS on connect() (was Re: BUG: Unusual TCP Connect() results.)
- From: Herbert Xu <[email protected]>
- Re: [PATCH] fix small DoS on connect() (was Re: BUG: Unusual TCP Connect() results.)
- From: Willy Tarreau <[email protected]>
- Re: [PATCH] fix small DoS on connect() (was Re: BUG: Unusual TCP Connect() results.)
- From: Herbert Xu <[email protected]>
- Re: [PATCH] fix small DoS on connect() (was Re: BUG: Unusual TCP Connect() results.)
- From: Willy Tarreau <[email protected]>
- Re: [PATCH] fix small DoS on connect() (was Re: BUG: Unusual TCP Connect() results.)
- From: Herbert Xu <[email protected]>
- Re: [PATCH] fix small DoS on connect() (was Re: BUG: Unusual TCP Connect() results.)
- From: Willy Tarreau <[email protected]>
- Re: [PATCH] fix small DoS on connect() (was Re: BUG: Unusual TCP Connect() results.)
- From: Herbert Xu <[email protected]>
- Re: [PATCH] fix small DoS on connect() (was Re: BUG: Unusual TCP Connect() results.)
- From: Thomas Graf <[email protected]>
- Re: [PATCH] fix small DoS on connect() (was Re: BUG: Unusual TCP Connect() results.)
- Prev by Date: Re: optional delay after partition detection at boot time
- Next by Date: 2.6.11-ck10
- Previous by thread: Re: [PATCH] fix small DoS on connect() (was Re: BUG: Unusual TCP Connect() results.)
- Next by thread: Re: [PATCH] fix small DoS on connect() (was Re: BUG: Unusual TCP Connect() results.)
- Index(es):
 |