The most useful thing you can do is drop packet fragments at your border
router, though this may break certain kinds of legit traffic, so be careful.
Because FireWall-1 tries to re-assemble the packet before it is INSPECTed,
it can not do anything against this sort of attack.
-- PhoneBoy
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Jack
> Coates
> Sent: Monday, June 19, 2000 9:44 AM
> To: Brian Tan Wee Beng
> Cc: [EMAIL PROTECTED]
> Subject: Re: [FW1] Jolt2.c
>
>
>
> I'm not sure I understand the question.
>
> If you just want to run jolt2 against your own firewall in a lab, then
> download it from www.rootshell.com, compile it, and run it. Then you can
> get jiggy with the sniffers and IDS's of your choice, figure out what's
> happening and why, maybe come up with a useful defense posture.
>
> Note that a useful defense posture will be challenging to reach. Jolt and
> its ilk (ICMP fraggers and flooders) are very simple tools. Using them to
> take down a machine is the equivalent of using a frying pan to kill bugs.
> It's not elegant, but it is effective.
>
> Jack Coates, Rainfinity SE
> t: 650-962-5301 m: 650-280-4376
>
>
> On Mon, 19 Jun 2000, Brian Tan Wee Beng wrote:
>
> >
> > Hi
> > I'm would like to personally see what's the effect of Jolt2.c on my
> > firewall(in test environment) but i'm not too sure how to go
> about doing
> > so.Anybody can drop me some hints??Thanks.
> >
> > Cheers
> > ________________________________________________________________________
> > Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com
> >
> >
> >
> >
> ==================================================================
> ==============
> > To unsubscribe from this mailing list, please see the
> instructions at
> > http://www.checkpoint.com/services/mailing.html
> >
> ==================================================================
> ==============
> >
>
>
>
> ==================================================================
> ==============
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> ==================================================================
> ==============
>
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
