看板FB_security
标 题Re: Other possible protection against RST/SYN attacks (was Re: TCP
发信站NCTU CSIE FreeBSD Server (Wed Apr 21 22:07:49 2004)
转信站ptt!FreeBSD.csie.NCTU!not-for-mail
MT> Date: Wed, 21 Apr 2004 12:30:40 -0400
MT> From: Mike Tancsa
MT> If the attacker were on the same subnet this would not do
MT> anything, but you have larger problems if this is the case.
Indeed. Anti-spoofing, per-switchport MAC restrictions, and
hardcoded ARP entries for routers all go a long way toward
improving security. :-)
Eddy
--
EverQuick Internet -
http://www.everquick.net/
A division of Brotsman & Dreger, Inc. -
http://www.brotsman.com/
Bandwidth, consulting, e-commerce, hosting, and network building
Phone: +1 785 865 5885 Lawrence and [inter]national
Phone: +1 316 794 8922 Wichita
_________________________________________________________________
DO NOT send mail to the following addresses :
[email protected] -or-
[email protected] -or-
[email protected]
Sending mail to spambait addresses is a great way to get blocked.
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "
[email protected]"