Vulnerability Development mailing list archives

Re: Networking theories


From: peak () ARGO TROJA MFF CUNI CZ (Pavel Kankovsky)
Date: Tue, 9 May 2000 21:59:42 +0200


On Mon, 8 May 2000, Matthew King wrote:

This is true.. Does anyone know which implementations of IP actually check
the contents of a Source Quench ICMP packet?

Recent versions of Linux appear to check TCP sequence number for
(all) ICMP messages related to TCP connections. (AFAIK, OpenBSD, even
the latest version does not do it. Odd.) UDP (and other protocols) is
considerable harder; you could use IP packet id but you would have to
use a crypto.-strong generator and remember all numbers used recently (or
be able to recompute them).

--Pavel Kankovsky aka Peak  [ Boycott Microsoft--http://www.vcnet.com/bms ]
"Resistance is futile. Open your source code and prepare for assimilation."


Current thread: