Re: Spoofing multicast addresses

2001-01-09 Thread Don Lewis
On Jan 10, 12:05am, Wes Peters wrote: } Subject: Re: Spoofing multicast addresses } The real problem with the "stream" attack was not the volume of incoming } SYN packets, but the reflector nature of the attack when using forged } multicast source addresses. The code did not correctly "ignore" t

Re: Spoofing multicast addresses

2001-01-09 Thread Don Lewis
On Jan 10, 1:13am, Mike Silbersack wrote: } Subject: Re: Spoofing multicast addresses } } On Wed, 10 Jan 2001, Wes Peters wrote: } } > Don Lewis wrote: } > > A good reason for putting these checks in their present location is } > > that it gets them out of the main code path. Under normal circ

Re: Spoofing multicast addresses

2001-01-09 Thread Mike Silbersack
On Wed, 10 Jan 2001, Wes Peters wrote: > Don Lewis wrote: > > A good reason for putting these checks in their present location is > > that it gets them out of the main code path. Under normal circumstances, > > the vast majority of the incoming packets will be for established > > connections an

Re: Spoofing multicast addresses

2001-01-09 Thread Wes Peters
Don Lewis wrote: > > [ freebsd-net added ] > > On Jan 9, 6:58pm, Wes Peters wrote: > } Subject: Re: Spoofing multicast addresses > } Mike Silbersack wrote: > } > > } > The check is done when the SYN is received, hence such a situation as you > } > describe should not be able to occur. > } > > }

Re: Spoofing multicast addresses

2001-01-09 Thread Don Lewis
[ freebsd-net added ] On Jan 9, 6:58pm, Wes Peters wrote: } Subject: Re: Spoofing multicast addresses } Mike Silbersack wrote: } > } > The check is done when the SYN is received, hence such a situation as you } > describe should not be able to occur. } > } > >From tcp_input.c: } > } >

D-link DFE530 problem in 4.2-STABLE? Help!

2001-01-09 Thread Warren Toomey
I'm having problems getting throughout above 63Mbps with a 4.2_STABLE system and a D-link DFE530 Fast Ethernet card. I've put full details of the problem and the information I have up at http://minnie.cs.adfa.edu.au/Beowulf/Problem/ Would some kind soul have a look and see if they can spot anyth

Re: IPSEC: racoon and Win2K

2001-01-09 Thread itojun
>The only problem I've encountered is that, when making Win2K and FreeBSD >interoperate, the IKE's phase 2 only suceeds if >Win2K initiates the process. If racoon is to start it, Win2k will not >accept any proposal for phase 2, complaining that the dh group number >(which should correctly be eit

Re: moving secondary name servers to primary

2001-01-09 Thread Nick Rogness
On Tue, 9 Jan 2001, Peter Brezny wrote: > Is there an easy way to convert a secondary bind8 name server to a primary? > > I had hoped to just be able to change the designation in the named.conf file > from type slave to type master, however when i look at the individual zone > files, they 've go

RE: moving secondary name servers to primary

2001-01-09 Thread Nicole
On 10-Jan-01 Peter Brezny wrote: > Is there an easy way to convert a secondary bind8 name server to a primary? > > I had hoped to just be able to change the designation in the named.conf file > from type slave to type master, however when i look at the individual zone > files, they 've got a lot

moving secondary name servers to primary

2001-01-09 Thread Peter Brezny
Is there an easy way to convert a secondary bind8 name server to a primary? I had hoped to just be able to change the designation in the named.conf file from type slave to type master, however when i look at the individual zone files, they 've got a lot of mish mash in there from being secondary

IPSEC: racoon and Win2K

2001-01-09 Thread Jorge Peixoto Vasquez
I've read the mini-howto on how to setup IPSEC on the FreeBSD (http://asherah.dyndns.org/~josh/ipsec-howto.txt) and have been most succesful so far. I would be very glad if anyone could help me on the following matter: The only problem I've encountered is that, when making Win2K and FreeBSD in

Re: ICMP error processing (was: Re: what to do now ? Was: cvs commit: src/sys/netinet ip_icmp.c tcp_subr.c tcp_var.h)

2001-01-09 Thread Jesper Skriver
On Mon, Jan 08, 2001 at 11:02:17PM -0800, Don Lewis wrote: > [ cc: trimmed ] > > On Dec 31, 9:07pm, Jesper Skriver wrote: > } Subject: Re: what to do now ? Was: cvs commit: src/sys/netinet ip_icmp.c > } On Wed, Dec 20, 2000 at 03:51:18PM +0100, Jesper Skriver wrote: > } > On Wed, Dec 20, 2000