OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 4th quarter (Oct-Dec) 1995: Re: denial of service attack possible

Re: denial of service attack possible

Darren Reed (avaloncoombs.anu.edu.au)
Sun, 29 Oct 1995 17:50:22 +1100 

In some mail from Nathan Lawson, sie said:
[...]
> This doesn't address direct d.o.s. attacks, though.  I think that Solaris's
> tcp_eager_listeners option could be used to allow your application to process
> connection requests before the complete 3-way handshake.  Other than that,
> it's up to you whether you want to violate RFC's and perhaps break other things
> by dropping connection requests from the queue faster or limiting the number
> of requests from one machine.

I think that Linux also implements TCP in a similar way - I've seen and made
inetd on linux return half open connections that were closed before anything
got to run (tcp wrappers, etc).  Looks very strange in logs.

darren