Re: [PEN-TEST] IP fragmentation attack

["Fabio Pietrosanti (naif)" <fabio () TELEMAIL IT>]

Hi Dario,

Working with Cisco PIX Firewall, i notice that NO malicious fragment
should pass this statefull firewall, also the ios's CBAC with  "ip inspect
fragment" every kind of attack that use fragmentation.

naif


On Wed, 18 Oct 2000, Dario Forte - Csi Member - wrote:

> Greetings to all.
>
> My lab is doing an specific  pen test against two different lan segment
> (Firewall and Ids Protected), with Ip Frag Attack.
> Does somebody can highlight some real recent news about this issue ?
> We already know the lance's, rfc's and DugSong paper about these argument;we
> would like to know more info (and opinions) about the fact  that IP
> fragmentation works as firewalls are supposed to keep the state of a
> connection.
> Thanks in advance
>
> dario