[5000] in North American Network Operators' Group
Re: BSDI announcement about defense against syn-flooding attacks
daemon@ATHENA.MIT.EDU (Avi Freedman)
Thu Oct 3 20:42:47 1996
From: Avi Freedman <freedman@netaxs.com>
To: sommers@sfo.com (William Sommers)
Date: Thu, 3 Oct 1996 20:39:03 -0400 (EDT)
Cc: nanog@merit.edu, rob@rjl.com
In-Reply-To: <Chameleon.961003172342.sommers@casanova.sfo.com> from "William Sommers" at Oct 3, 96 05:15:56 pm
> The remainder of the patches (K210-021, K210-022, and U210-025)
> add support for IP source checking, and for reducing and/or
> eliminating problems associated with SYN attacks, IP fragment
> attacks, and some other denial of service/looped server attacks.
>
> Unfortunately, these are available only for BSD/OS 2.1 -- nothing for prior
> releases.
>
> William Sommers
They're working on fixes for prior releases, I believe.
(I have it from the coder's fingers).
Avi
