[34523] in bugtraq

home help back first fref pref prev next nref lref last post

RE: IPv4 fragmentation --> The Rose Attack

daemon@ATHENA.MIT.EDU (Taylan Develioglu)
Tue Apr 13 01:27:11 2004

From: "Taylan Develioglu" <percival@devnull.nl>
To: <bugtraq@securityfocus.com>
Date: Mon, 12 Apr 2004 13:21:05 +0200
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
In-Reply-To: <4073C25A.40201@atlantis.bg>
Message-Id: <E1BCzVB-0008e6-00@post-21.mail.nl.demon.net>

Has anyone tried setting /proc/sys/net/ipv4/ipfrag_low_thresh on linux ?

This should minimize memory usage for packet reassembly, and may be an easy
workaround.

Taylan


home help back first fref pref prev next nref lref last post