Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 8 Jul 2002 17:22:51 -0400
From:      Klaus Steden <klaus@compt.com>
To:        Peter Pentchev <roam@ringlet.net>
Cc:        twig les <twigles@yahoo.com>, "Dalin S. Owen" <dowen@nexusxi.com>, Laurence Brockman <laurence@fluxinc.com>, security@FreeBSD.ORG
Subject:   Re: hiding OS name
Message-ID:  <20020708172251.K13139@cthulu.compt.com>
In-Reply-To: <20020708183726.GA363@straylight.oblivion.bg>; from roam@ringlet.net on Mon, Jul 08, 2002 at 09:37:26PM %2B0300
References:  <20020708111122.A33379@nexusxi.com> <20020708175214.31781.qmail@web10104.mail.yahoo.com> <20020708141342.G13139@cthulu.compt.com> <20020708183726.GA363@straylight.oblivion.bg>

next in thread | previous in thread | raw e-mail | index | archive | help
> 
> I know I'm going to regret posting in this thread, but so be it :)
> 
> Does your friend know that, unlikely as it is made by modern ingress and
> egress routing practices, IP spoofing is still not quite ruled out?
> Will your friend's portsentry setup happily blackhole e.g. his ISP's
> nameserver, or the root nameservers, or www.cnn.com's IP addresses,
> simply because somebody found a way to send a TCP SYN packet with a
> forged source address to e.g. your friend's machine's port 3? :)
> 
That's his problem, though, not mine. :>

Klaus

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020708172251.K13139>