[2473] in SIPB-AFS-requests
SunOS kernel modifications for resisting SYN attacks
daemon@ATHENA.MIT.EDU (mhpower@MIT.EDU)
Wed Sep 25 03:38:36 1996
From: mhpower@MIT.EDU
To: usenet@MIT.EDU, rtfm-maintainers@MIT.EDU, anxiety-maintainers@MIT.EDU,
sipb-afsreq@MIT.EDU
Date: Wed, 25 Sep 1996 03:38:18 EDT
Someone claims to have patches to the SunOS kernel that help defend
against SYN attacks, at the URL http://www.netaxs.com/~freedman/syn/.
There's a description of source-code changes to tcp_timer.h and
uipc_socket2.c, and some object files for an unspecified version of
SunOS (presumably SunOS 4). Does anyone think it'd be worthwhile to
build a kernel here with these changes, and if we did, would we
definitely want to modify the kernel source code ourselves, rather
than hoping that the object files on ftp.nexaxs.com are correct?
Matt