On Wed, 15 Oct 1997, Darren Reed wrote:
> So far, there aren't any TCP header options which pose a threat to
> security, so one might argue there is no reason to check them for
> flagging a packet to drop. But I wouldn't put it past a firewall to
> check that the TCP options present are recognised - an interesting
Unless you consider denial of service a security problem, in which case
all sorts of routers will fall over due to invalid TCP options.
- Oliver
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Secure Networks Incorporated. Calgary, Alberta, Canada, (403) 262-9211
References:
|
|
