OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Christopher Kruslicky (anub-openbsdopen.mine.nu)
Date: Mon Jun 03 2002 - 18:03:26 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Monday 03 June 2002 01:13 pm, Darren Reed wrote:
    > In some mail from Jedi/Sector One, sie said:
    > [...]
    >
    [...]
    > > TTL mangling.
    >
    > Why ?

    The only reason I can think of for this is to limit some service or
    ICMP traffic based on network topology. To allow only hosts within X
    hops from pinging the firewall, for example. This could allow only an
    upstream provider's few devices to test. Not sure why the IP blocks
    would be a mystery in those cases though....

    [...]
    > > Random match.
    >
    > For random security ?

    That's just rather funny (maybe it's taken out of context, but still)