RE: COmpare Firewalls

>I know that MS has addressed problems like "ping of death" to NT with
>previous service packs; See
>http://support.microsoft.com/support/kb/articles/Q132/4/70.asp for a really
>old one. Does anyone out there know whether NT 4 SP5 (without MS Proxy's
>packet filter) is still vulnerable to such attacks? Just curious.

http://www.microsoft.com/security/bulletins/ms99-034.asp
Patch Available for "Fragmented IGMP Packet" Vulnerability

Windows still has stack-level issues. This bulletin is less than a week old.

As for Daemon's comment about apps not being able to protect against
ICMP stuff..

Take a look at Route's BSD mod to make ICMP a userland app.

I suppose that's cheating, though, since he ripped it out of the kernel. :)

                         Ryan
Received on Sep 10 1999