lkml.org 
[lkml]   [1999]   [Sep]   [13]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
Subjectnetfilter plugin: antispoof
Hi rusty,

I think I just came up with a rather fun idea for a
netfilter plugin.

Basically, it terminates IP connections that it doesn't
know of. This makes pretty sure that people trying to
do IP spoofing (because they're along the path) get their
connections terminated immediately because the victim
machine hasn't done the negotiations itself.

I don't know how quickly a connection can be terminated
or how effective this measure could be, but a FIN/FINACK
combo shouldn't be too hard, now should it?

Rik
--
The Internet is not a network of computers. It is a network
of people. That is its real strength.
--
work at: http://www.reseau.nl/
home at: http://www.nl.linux.org/~riel/


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:53    [W:0.036 / U:0.884 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site