[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Full-disclosure] Revised paper on "ICMP attacks against TCP"
- To: Fernando Gont <fernando@xxxxxxxxxxxxxx>
- Subject: Re: [Full-disclosure] Revised paper on "ICMP attacks against TCP"
- From: Florian Weimer <fw@xxxxxxxxxxxxx>
- Date: Sat, 10 Sep 2005 16:53:12 +0200
* Fernando Gont:
> IIRC, those Cisco products that are not vulnerable to the PMTU just don't
> implement PMTUD, right?
You can explicitly enable PMTUD if you want ("ip tcp
path-mtu-discovery"). It's recommended to reduce CPU overhead for
processing BGP message (no kidding, apparently it id make a difference
in the past).
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/