[4975] in North American Network Operators' Group
Re: TCP SYN attacks
daemon@ATHENA.MIT.EDU (Richard Stiennon)
Thu Oct 3 16:12:04 1996
Date: Thu, 03 Oct 1996 16:01:43 -0400
To: Ran Atkinson <rja@cisco.com>
From: Richard Stiennon <richards@netrex.com>
Cc: nanog@merit.edu, iepg@iepg.org
At 11:37 AM 10/3/96 -0700, Ran Atkinson wrote:
>>Dima Volodin writes:
>>> Now can I hold my breath waiting for vendors to incorporate this stuff
>>> into their products?
>
>At least BSDI, Sun, SGI, and HP are working on TCP SYN hardening.
>(yes, cisco is also on top of things :-).
>
>I have no data on what might be up at other vendors.
Check out the elegant solution just announced by Checkpoint:
http://www.checkpoint.com/fw21/syndefender/syndefender-white.html
This is a firewall solution. I like the psuedo-NAT done to adjust sequence
number.
----------------------------------------------------------------------------
Richard Stiennon richards@netrex.com
Director, Business Development http://www.netrex.com
Netrex, Inc. Voice: 810-352-9643
Southfield, Michigan Fax: 810-352-2375
-----------------------------------------------------------------------------
Providing businesses and organizations with secure Internet solutions.
