Re: Dropping connections without RST

[Matt Crawford]

I see no point in the proposed mechanism.  The scanner can still tell
the difference between a port with a listener and a port with none.
The only case in which the attacker is confounded would be in
distinguishing a box which is down or off the net from a box which
has *no* services and does not answer ping.  I call that an
uninteresting case.

In the endless volley between attacker and defender, this would be a
very feeble shot indeed.
______________________________________________________________________________
Matt Crawford                    [EMAIL PROTECTED]                     Fermilab
"A5.1.5.2.7.1. Remove all classified and CCI boards from the COMSEC equipment,
thoroughly smash them with a hammer or an ax, and scatter the pieces."


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message