Great Circle Associates Firewalls
(January 1995)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: "ack" bit security
From: alan @ mid . net (Alan Hannan)
Date: Thu, 26 Jan 1995 08:52:52 -0600 (CST)
To: Jari . Artes @ teleware . fi
Cc: alan @ mid . net, firewalls @ greatcircle . com
In-reply-to: <282F91E1A2A @ mail . teleware . fi> from "Jari Artes" at Jan 26, 95 09:39:47 am

> 
> I suppose there could be some tcp implementations around that don't
> check the ack bit before the syn bit. But at least the publicly available
> tcp source code (*bsd etc.) don't exhibit this problem.
> 

  So, can I block non-acked packets incoming at my router, and be assured
that they won't reach my network nodes?
-- 
+ alan @
 mid .
 net Network Operations Center (402)/472-0242, Fax (402)/472-0240  +
+ + + + + + + + + + + + + + + + + + ++ + + + + + + + + + + + + + + + + + + + +
+============\\   "If I could be anyone in the world, I would be myself so   +
+MIDnet, Inc. \\____  I wouldn't have to buy new clothes" - Jim, "Taxi"      +


References:
Indexed By Date Previous: Big floppies
From: padgett @ tccslr . dnet . mmc . com (A. Padgett Peterson, P.E. Information Security)
Next: Re: Hijacking tool
From: Kevin Ruddy <kevin . ruddy @ powerdog . com>
Indexed By Thread Previous: Re: "ack" bit security
From: "Jari Artes" <JARI @ tw . teleware . fi>
Next: Re: "ack" bit security
From: "Jari Artes" <JARI @ tw . teleware . fi>

Google
 
Search Internet Search www.greatcircle.com